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Abstract 

In order to combine operational and logical styles of specifications in one 
unified framework, the notion of logic labelled transition systems (Logic LTS, 
for short) has been presented and explored by Liittgen and Vogler in [TCS 373(1- 
2):19-40; Inform. & Comput. 208:845-867]. In contrast with usual LTS, two 
logical constructors A and V over Logic LTSs are introduced to describe logical 
combinations of specifications. Hitherto such framework has been dealt with 
in considerable depth, however, process algebraic style way has not yet been 
involved and the axiomatization of constructors over Logic LTSs is absent. This 
paper tries to develop Liittgen and Vogler's work along this direction. We will 
present a process calculus for Logic LTSs (CLL, for short). The language CLL is 
explored in detail from two different but equivalent views. Based on behavioral 
view, the notion of ready simulation is adopted to formalize the refinement 
relation, and the behavioral theory is developed. Based on proof-theoretic view, 
a sound and ground-complete axiomatic system for CLL is provided, which 
captures operators in CLL through (in)equational laws. 

Keywords: Logic operators. Process calculus. Ready simulation. Axiomatic 
system. Logic labelled transition system 



1. Introduction 

Over the past three decades, a lot of approaches have been proposed to 
formally specify and reason about reactive systems. Process algebra and 
temporal logic [2^ are two popular paradigms of them. 

In process-algebraic paradigm, a system specification and its implementation 
usually are formulated in the same notation, and the underlying semantics are 
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often given operationally. The notion of refinement is adopted to capture the 
correctness of implementation. 

In contrast, the temporal- logic paradigm adopts the language of temporal 
logics to formulate specifications abstractly, and implementations are described 
in terms of operational notations |26j . Usually, model checking technique is used 
to establish that the system satisfies its specification [7j. 

Process-algebraic paradigm supports compositional reasoning (i.e., refine- 
ment of one part of a system does not depend on others), which is one of the 
most significant advantages of it. The merit of temporal-logic paradigm lies in its 
support for abstract specifications, where relevant operational details may not 
be concerned. Traditionally, process-algebraic and temporal-logic formalisms 
are not mixed. 

In order to take advantage of both paradigms when designing systems, some 
theories for heterogeneous specifications have been proposed, e.g., [8t l9| [Mf [T8l 

, which uniformly integrate refinement-based and temporal- logic specification 
styles. Among them, Cleaveland and Liittgen present a semantic framework for 
heterogenous system design based on Biichi automata and labelled transition 
systems augmented with an unimplementability predicate, and adopt Nicola 
and Hennessy's must-testing preorder [23] to describe refinement relation [3 
[5]. However, such refinement relation is not a precongruence [5]. Hence, it 
does not support compositional reasoning. Moreover, in such framework, the 
operator conjunction lacks the desired property that r is an implementation of 
the specification p A g if and only if r implements both p and q [9\ . 

Recently, Liittgen and Vogler propose the notion of Logic LTS, which com- 
bines operational and logical styles of specification in one unified framework 
[TOl HO] . Roughly speaking, a Logic LTS is a labelled transition system with an 
inconsistency predicate on states. A few of constructors over Logic LTSs are 
introduced, which include operational constructors, such as CSP-style paral- 
lel composition and hiding, and logic constructors conjunction and disjunction. 
This framework allows one to freely mix operational operators and logic oper- 
ators, while most early heterogenous specifications couple them loosely and do 
not allow for mixed specification [3 [TO]. Moreover, the drawbacks in [51 [3] men- 
tioned above have been remedied by using ready-tree semantics [TO]. In order 
to support compositional reasoning when introducing the parallel constructor 
over Logic LTSs, a kind of modified ready simulation is adopted to describe 
the refinement relation [2U]. Some standard temporal logic operators, such as 
"always" and "unless" , are also integrated into this framework f2Tj . 

Conjunction is a distinctive constructor in the framework of Logic LTSs, we 
give a simple example to illustrate how it works in heterogenous system design. 
In Figure [T] S represents a specification which involves actions a and b, and 
C represents an additional constraint which requires that the action b cannot 
occur in the implementation. Then, the dashed line in the Logic LTS SAC 
represents a specification which refines S and satisfies the constraint C. Briefiy 
speaking, if a state in S has 6-derivative, then the constructor conjunction turns 
this state into inconsistent state, i.e., unimplementable state. Thus, such state 
cannot be reached at run-timc. The reader may refer to [20| for the concrete 
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Figure 1: Conjunction 



construction of A C. 

Up to now, Logic LTSs have been explored deeply, however, term-based way 
has not yet been involved, and the axiomatization of constructors is absent. 
This paper intends to develop Liittgen and Vogler's work along the direction 
suggested by them in j5D]. We present a process calculus for Logic LTSs (CLL, 
for short). In addition to prefix a.(), external choice □ and parallel operator \\a, 
CLL contains logical operators A and V over process terms, which correspond 
to the constructors conjunction and disjunction over Logic LTSs respectively. 
Follows [20], a variant of the usual notion of ready simulation is adopted to 
formalize the refinement relation. Moreover, an axiomatic system AXqll is 
provided to characterize the operators in CLL in terms of (in)equational laws, 
and the soundness and ground-completeness w.r.t ready simulation are estab- 
lished. 

The remainder of this paper is organized as follows. The next section re- 
calls some related notions. Section 3 introduces SOS rules of CLL. In section 4, 
based on reducing technique, the existence and uniqueness of stable transition 
model for CLL is demonstrated, and a few of basic properties of the LTS asso- 
ciated with CLL are explored. Section 5 develops a behavioral theory of CLL. 
Section 6 provides an axiomatic system for CLL, and the soundness and ground- 
completeness are showed. Finally, a brief conclusion and discussion are given in 
Section 7. 

2. Preliminaries 

2.1. Logic LTS 

In this subsection, we introduce some useful notations and recall the defini- 
tion of Logic LTS. 

Let Act be the set of visible action names ranged over by letters a, b, etc., 
and let Actr denote Act U {r} ranged over by a and /3, where r represents 
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invisible actions. A labelled transition system with inconsistency predicate is a 
quadruple {P,Actr, — >,F), where P is a set of states, — >C P x Actr x P is 
the transition relation and F C P is the set of all inconsistent states. 

As usual, we write p q if {p,a,q) G — >. q is called an a-derivative of 
p if p q. We write p (or, p if 3q G P.p q {$q S P.p q, 
respectively). I{p) stands for the ready set {a G Actr\p of p. A state p is 
said to be stable if it cannot engage in any r-transition, i.e., p Some useful 
decorated transition relations are listed below. 

p — > i? 9 iff P — > q and p,q (ji F . 

p q iff p{ — >)*q, where ( — >)* is the transitive reflexive closure of — >. 
p => q in dr, s G P.p r > s q. 

p =>F q (or, p =>F q) iff P 9 (p =^ respectively) and all states 
along the sequence, including p and g, are not in F. 

p =^F \q (or, p =>F \q) iff P =^F q ip =^f q, respectively) and q is 
stable. 

Definition 2.1 (Logic LTS [gOj). An LTS (F, AcU, — >, F) is said to be a Logic 
LTS if, for each peP, 

(LTSl) pe F if3ae X(p)Vg e Pip ^ q implies g G F), 
(LTS2) peFif$qe P.p ^F \q- 

The condition (LTSl) formalizes the backward propagation of inconsisten- 
cies, and (LTS2) captures the intuition that divergence (i.e., infinite sequences 
of r-transitions) should be viewed as catastrophic. For more motivation behind 
(LTSl) and (LTS2), the reader may refer to [20] . 

Definition 2.2 (r-pure [2D]). An LTS {P,Actr, — >,F) is said to be r-pure if, 
for each p d P, p implies $a G Act. p 

Hence, for any state s in a r-pure LTS, either I(s) = {r} or I(s) C Act. 
Following [20 , this paper will focus on r-pure Logic LTSs. 

2.2. Transition System Specification 

Structural Operational Semantics (SOS) is proposed by G. Plotkin in [25] . 
which is a logical method of giving operational semantics. The basic idea be- 
hind SOS is to describe the behavior of a program in terms of the behavior 
of its components. Thus, SOS provides a syntax oriented view on operational 
semantics. Transition System Specifications (TSS's), as presented by Groote 
and Vaandrager in [T5], are formalizations of SOS. This subsection recalls basic 
concepts related to TSS. Further information on this issue may be found in 

[nisi Hi]. 

Let V be an infinite set of variables and S a signature. The set of S-terms 
over V, denoted by T{J:, V), is the least set such that (I) V C r(E, V) and (II) 
if / G S and <i,...,i„ G T{J:,V), then /(ii,...,t„) G T(E,1/), where n is the 
arity of /. T(E) is used to abbreviate T(E, V), r(S,0) is abbreviated by T{T,), 
elements in r(S) are called closed or ground terms. 
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A substitution cr is a mapping from V to T(S). As usual, a substitution cr 
is lifted to a mapping T(S) -)> T(E) by a{f{ti, ...,tn)) = f{<j{ti), ■ ■ ■,u{tn)) for 
n-arity / S S and t\,. . . ,tn S T(E). A substitution is said to be closed if it 
maps all variables to ground terms. 

A TSS is a quadruple V = (S, A, P, i?), where S is a signature, A is a set of 
labels, P is a set of predicate symbols and i? is a set of rules. Positive literals 
arc all expressions of the form t — > t' or tP, while negative literals are all 
expressions of the form t or i^P, where t,t' e T(E), a ^ A and P e P. 
A literal is a positive or negative literal, and V; X are used to range over 
literals. A literal is said to be ground or closed if all terms occurring in it are 
ground. A rule r G i? has the form like ^, where H, the premises of the rule 
r, denoted as prem{r), is a set of literals, and C, the conclusion of the rule r, 
denoted as conc{r), is a positive literal. Furthermore, wc write pprem{r) for the 
set of positive premises of r and nprem{r) for the set of negative premises of r. 
A rule r is said to be positive if nprem{r) = 0. A TSS is said to be positive if 
it has only positive rules. A rule is said to be an axiom if its set of premises is 
empty. An axiom j^i^ is often written as t — ^ t'. Given a substitution a and 
a rule r G R, a{r) is the rule obtained from r by replacing each variable in r by 
its cr-image, that is, a{r) = _ Moreover, if a is closed then a{r) 

is said to be a ground instance of r. 

Definition 2.3 (Proof in Positive TSS). Let V = {^,A,V,R) be a positive 
TSS. A proof of a closed positive literal -0 from "P is a well-founded, upwardly 
branching tree, whose nodes are labelled by closed literals, such that 

— the root is labelled with ip, 

— if X is the label of a node q and {xi : i € /} is the set of labels of the 
nodes directly above q, then there is a rule {(pi : i G 1} ftp in R. and a closed 
substitution a such that x = <^{f) and Xi = f^ifi) for each i £ I. 

If a proof of tjj from V exists, then ip is said to be provable from P, in symbols 

Ph V- 

3. Syntax and SOS Rules of CLL 

The process terms in CLL are defined by BNF below: 

i ::= I _L | (a.t) \ (tat) \ {t At) \ {tV t) \ {t \\a t) 

where a G AcIt^ and A C Act. We denote T{T,cll) as the set of all process 
terms. We shall always use ti = t2 to mean that the expressions ti and <2 are 
syntactically identical. 

As usual, is a process that can do nothing. The prefix a.t has a single 
capability, expressed by a; the process t cannot proceed until a has been ex- 
ercised. □ is an external choice operator. ^ is a CSP-style parallel operator, 
ti \\a t2 represents a process that behaves as ti in parallel with t2 under the 
synchronization set A. _L represents an inconsistent process with empty behav- 
ior. V and A are logical operators, which are intended for describing logical 
combinations of processes. 
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We now provide SOS rules to specify the behavior of process terms formahy. 
These rules reflect Liittgen and Vogler's constructions in [5D] in process algebraic 
style. Unless noted, let a G Act, a S Actr and A C Act. All SOS rules are 
divided into two parts: Table [l] consists of operational rules Rai{\ < i < 15), 
and Table [2] contains predicate rules Rpi{l < i < 13). 

[Rai] a (^^2) 



a.xi — > xi xinx2 — > Hi 



(Ras) (i?a4)— ^ — 

xiax2 — !• y2 xinx2 — > yiOx2 

N X2^y2 .Xi-^yi,X2-^y2 

[Ra^] {Rae) 

xiax2 — > xiny2 X1AX2 — >yiAy2 

(Rar) r (Ras) ^ 

Xi A X2 > yi AX2 XiA X2 — > Xi A 2/2 



(Rag) (Ra 



W) T 

Xi V X2 > Xi Xi V X2 > X2 

tu \ xi^yi tu \ X2^y2 

[Rail) r (^012) r 

Xl \\a X2 > yi \\a X2 Xi \\a X2 — > Xi \\a 2/2 

Xl yi,X2 A xi /^,X2 y2,a ^ A 

[Rais) a [Ram)- 



(Rais) 



Xl \\a X2 — ^ yi \\a X2 Xi \\a X2 — > Xl \\a 2/2 

Xl yi,X2 y2,a& A 
Xl \\a X2 yi II 2/2 

Table 1: Operational Rules 



Negative premises in rules Ra2, Ra^, Rai^ and Rai^ give r-transition prece- 
dence over visible transitions, which guarantees that the transition model of 
CLL is T-pure (see. Section 4). Rules Rag and Raio illustrate that the opera- 
tional aspect of ti V t2 is same as internal choice in usual process calculus. The 
rule RaQ reflects that conjunction operator is a synchronous product for visible 
transitions. The rules about other operators are usual. 

Predicate rules in Table [2] specify the properties of the predicate F. In 
CLL, although both and _L have empty behavior, they represent different 
processes. The rule Rpi says that _L is inconsistent. Thus, the process _L 
cannot be implemented. While is consistent (see Lemma 4.17[ 5)), which is 



an implementable process. The rule Rp^ reflects that if both two disjunctive 
parts are inconsistent then so is the disjunction. Rules Rp^ — Rpg describe 
the system design strategy that if one part is inconsistent, then so is the whole 
composition. The rules Rpio and Rpn reveal that the conjunction is inconsistent 
if its conjuncts have different ready sets. The rule below formalizes (LTSl) in 



Def. 2.1 for process terms of the form xi A 0:2. 



Xl A X2 — >yy{xi A X2 — > y => yF) 
Xl A X2F 
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±F ' ' a.XiF 
XiF,X2F xiF 

(RPs) ^ (i?P4)— = ^ 

Xi V X2-r XiUx2i' 

xoF , , x{F 



X1OX2F Xi \\a X2F 

X2F ,^ , xiF 



(Rpr)^ ^ [Rp 



Xi\\aX2F '"''^'xiAx2F 
. X2F xi yi,X2 7^,xi A 0:2 

(i?P9) [RPW) 



Xi A X2F Xi A X2F 



/n .xi/^,X2 — >y2,xiAx2^ ,„ Xi A a;2 — >y,y^F 

(Rpii) 7 — ^ [Rpi2) — 

Xi A X2-t' _ Xi A X2Fa 

XiAX2'^ Z,XiAX2^Fa 

[Rpw 7 — ^ 

Xi A X2r 

Table 2: Predicate Rules 



However, the universal quantifier occurs in it explicitly. We adopt the method 
presented in [27] to eliminate universal quantifier. For this purpose, we introduce 
auxiliary predicate symbol Fa for each a € Act-r and rules Rpi2 and Rpi^. 
Intuitively, by the rule Rpi2, ti A i2^Q states that ti A ^2 has a consistent a- 
derivative. Rpi2 and Rpi^ together say that a conjunction is inconsistent if it 
can engage in a-transition and all its a-derivatives are inconsistent. A formal 
result concerning this will be given in Section 4 (see. Lemma 4.20). 

Summarily, the TSS for CLL is Vcll = {'^cll, AcU,Pcll, Rcll), where 
— ScLL = {□, A, VJD, ±} U {a.{)\a e AcU} U {|U \A C Act}, 
— PcLL = {F} U {Fa\a e Actr}, and 
— RcLL = {Rai, . . . , -Rais} U {i?pi, . . . , Rpu}. 



4. Operational Semantics of CLL 

A natural and simple method of describing the operational nature of pro- 
cesses is in terms of LTSs. Given a TSS, an important problem is how to asso- 
ciate LTSs with process terms. For positive TSS, the answer is straightforward. 
However, this problem is non-trivial for TSS containing negative premises. This 
section will consider the well-definedness of the TSS Vcll (i-e., existence and 
uniqueness of the LTS induced by Vcll), and explore basic properties of the 
induced transition model. 

4-.1. Basic Notations 

Let A be a set of labels and P a set of predicate symbols. A transition model 
M is a subset of Tr{j:,A) U Pred(S,P), where Trlj:,A) = T{T,) x Ax T(I]) 
and Pred{T,,P) = r(S) x P, elements {t,a,t') and (t, P) in M are written as 
t t' and tP respectively. 
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A positive closed literal '0 holds in M or -0 is valid in M, in symbols M \= ip, 
if -0 S M. A negative closed literal t -/^ (or, t^P) holds in M, in symbols M \= 
ty^iM^ t^P, respectively), if there is no t' such that t t' e M (tP ^ Af , 
respectively). For a set of closed literals ^E*, we write M \~ 4* iff M \— for each 
■0 G 4'. 

Definition 4.1. Let V = (E,A,P,i?) be a TSS and M a transition model. 
M is said to be a model of V if, for each r £ R and cr : V — > ^(E) such 
that M ^ prem{a{r)), we have M |= conc(cr(r)). M is said to be supported 
by V if, for each tp G M, there exists r £ R and cr : F — > T(E) such that 
M \= prem{a{r)) and conc(cr(r)) = ijj. M is said to be a supported model of 
if M is supported by V and M is a model of V. 

It is well known that every positive TSS V has a least transition model, 
which exactly consists of provable transitions of P [S]. However, since it is not 
immediately clear what can be considered a "proof for a negative formula, it is 
much less trivial to associate an LTS with a TSS containing negative premises 
|16j . The first generic answer to this question is formulated in [51 116) , in which 
the above notion of supported model is introduced. However, this notion doesn't 
always work well. Several alternatives have been proposed, and a good overview 
on this issue is provided in [T3]. In the following, we recall the notions of 
stratification and stable transition model, which play an important role in this 
field. 

Definition 4.2 (Stratification [HIS]). Let V = (E,A,P,i?) be a TSS and a an 
ordinal number. A function S : Tr(E,A) U Pred{I],V) — > a is said to be a 
stratification of V if, for every rule r £ R and every substitution a : V — > 2^(E), 
the following conditions hold. 

(1) S{ijj) < S{conc{a{r))) for each -0 G pprem{a{r)), 

(2) S{tP) < S{conc{<T{r))) for each t^P G nprem{<T{r)), and 

(3) S{t t') < S{conc{a{r))) for each t' G T(E) and t y^G nprem{a{r)). 

A TSS is said to be stratified iff there exists a stratification function for it. 

In the following, given a set R of rules, we denote Rground the set of all 
ground instances of rules in R. Similarly, given a rule r, rground is the set of all 
ground instances of it. 

Definition 4.3 (Stable Transition Model E]). Let V = {Y.,A,V,R) be a 
TSS and M a transition model. M is said to be a stable transition model for V 
if 

where Strip{V,M) is the TSS (E, ^, P, S'irip(i?, M)) with 

Strip{R, M) = { PP^^^y) I ^ g Rground and M |= nprem{r) \ , 
1^ concyr) J 

and Mgiripiv.M) is the least transition model of the positive TSS Strip(V, M). 
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The above notion provides a reasonable semantics for TSS's with negative 
premises. TSS's that do not have a unique stable model should be ruled out 
and considered pathological [4i • As is well known, stable models are supported 
models, and each stratified TSS V has a unique stable model 0, moreover, 
such stable model does not depend on particular stratification function [TB] . 
Unfortunately, the TSS Vcll in Section 3 cannot be stratified. 

Observation 4.4. Vcll cannot be stratified. 

Proo f. A ssume that 5 is a stratification of Vcll- Let ^1,^2 S T{Yjcll)- By 
Def. |42j the rule i?pi3 entails Siti A t2Fa) < S{ti A t2F). However, the rule 
Rpi2 requires that S{ti A <2-F'q) > S{ti A t2F) holds. Hence, the stratification 
oiVcLL does not exist. □ 

In [5], the notion of positive after reduction (also called complete in |13j ) 
is introduced as a criterion for well-definedness of the semantics and is shown 
to be more general than stratification. We shall adopt such reducing technique 
to obtain a stable transition model of Vcll- Related concepts and results are 
recalled below. 

Definition 4.5. Let V = (S, A,P, i?) be a TSS and Mtme, Mpos be transition 
models. The reduction TSS of V w.r.t Mtme and Mpos is defined as 

ReduCe{V, Mtme, Mpos) = (S, A, P, ReduCe{R, Mtme, Mpos)), 

where Reduce{R, Mtme, Mpos) is the set of all rules r' such that there exists 
r e Rground satisfying 

1. Mtme h nprem{r), 

2. Mpos \^ pprem{r), and 

conc{r) 

In such case, we will say that r' originates from r. Clearly, Reduce(V , Mtme, Mpos) 
is ground, that is, its all rules are ground. 

Definition 4.6. Let V = (E, A,P,i?) be a ground TSS. 

—True{V) = {T,, A,V,True{R)), where True{R) = {r e R\nprem{r) = 0}. 

—Pos{V) = (T,,A,F,Pos{R)), where 

1^ concyr) J 

Definition 4.7. Let V = {Y.,A,V,R) be a TSS. For every ordinal number a, 
the a-reduction of V^ in symbols Red°'{V), is recursively defined below 

—Red°iV) ^ {J:,A,V, Rground), 

—Red^iV) = Reduce{V,[jp^^MTme(Red»(V)),(\f}<a^'^Pos(RedP(V)))- 

In the above, Mrpme{RedP {v)) (o^'? Mpos(Redf>{'P))) is the least transition model 
of the positive TSS True{Red^ (V)) {Pos{Red^ {V)), respectively). A useful 
result about reducing technique is cited below. 
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Theorem 4.8. Let V = (E,yl,P,i?) he a TSS. Suppose that S : Tr(E,A) U 
Pre(i(I],P) — > a is a stratification of Red^{V) for some ordinal a and /3. 
Then, the stable transition model of Red^iV) is the unique stable transition 
model ofV. 

Proof. See Theorem 6.1 and Corollary 6.5 in [5]. □ 

^.2. Stable Transition Model ofVcLL 

This subsection will adopt the reducing technique recalled above to show 
that VcLL has a unique stable model. It turns out that 1-reduction is enough 
to realize our aim. 

Firstly, we reduce Vcll- By the definition of a-reduction, we have 

Red°{VcLL) = i^CLL, ActryfcLL, RcLLground) 

and 

Red\VcLL) = {T.cLL,Actr, 

PcLL, Reduce{RcLL, Mt, Mp)), 

where 

(1) Mt and Mp are the least models of the positive TSS's True{Red°{VcLL)) 
and Pos{Red^ {Vcll)) below respectively, 

TrueiRed^iVcLL)) = [j Ra^ 

around 

u \JRp^ 

grounds 

where h = {1,4,5,6,7,8,9,10,11,12,15} and h = {1,2,3,4,5,6,7,8,9}, and 

Pos{Red\VcLL)) = 

True{Red°(VcLL))^ I J ( PP'^^'^^^^'^ \ U I J f PPf(^MRPi) \ 

conc{Ra,) J ^^^.^^^ \ conc{Rp^) J g^^^^^' 

where Ki = {2, 3, 13, 14} and K2 = {10, 11, 12, 13}. 

(2) Reduce{RcLL, Mt, Mp) is the set of all rules r' such that there exists 
r e RcLLground Satisfying 

2.1. Mt \= nprem(r), 

2.2. Mp \^pprem(r), and 

2 2 J,' {ipepprem(r)\MT^'4'}^{'^enprern{r)\Mp^il'} 

conc(r) 

Next, we will show that Red^{VcLL) is stratified. For this purpose, a few 
preliminary definitions are needed. As usual, the degree of process terms is 
defined below. 

1. |0| = |±|^1, 

2. \ti t2| = |ti| + |i2| + 1 for each e {A, □, V, |U}, 

3. \a.t\ ^ \t\ + l for each a e Actr- 

Further, the function Sp^^^ from Tr{Y,cLL, Actr) U Pred{Y,cLL,^CLL) to 
N is defined as 
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1. Svc.At ^ t') ^ \t\, 

2. S-pcLL{tF) = |i| X 2 + 1, and 

3. SvcLLitFa) = \t\x2 for each a e AcU- 

In order to show that S-p^j^^ is a stratification of Red}{VcLL)^ we shall first 
give the result below. 

Lemma 4.9. Ift^t'eMp then \t\ > \t'\. 

Proof. Let t -2+ t' e Mp. We proceed by induction on the depth of the proof 
tree of Pos{RedP{VcLL)) ^ t ^ t' . 

For the induction basis, the only rule applied in the proof tree is an axiom. 
Clearly, such axiom originates from Rai, Rag or Rqiq. It is a simple matter 
to check one by one. For instance, if t t' is inferred by the ground rule 
=^5 — in Raigroundj then t = P-ti, a — (3 and t' = ti. Obviously, \a.ti\ > \ti\. 

The induction step proceeds by distinguishing fifteen cases based on the for- 
mat of the last rule applied in the proof tree. It is routine, and we deal with 
two cases as examples and leave the remainder to the reader. 

Case 1 



tlAt2 ^t'jAtj 

Hence, we get t = ti A t2, a — a £ Act, t' = t[ A t'2, ti — % t[ e Mp 
and t2 — ^ t2 e Mp. By induction hypothesis (IH, for short), \ti\ > \ti\ and 
1^2! > 1^21- Then, it immediately follows that \ti A ^2! > \t'i A ts]. 

Case 2 



tiat2 — >t[ 

Clearly, this rule originates from one in Ro-2nround' where Ra2 — 



2groW 2 ^^ax2^yi' 

Thus, we have a — a £ Act, t = tiOt2, t' = t'^ and ti t[ e Alp. By IH, we 
get |ti| > It'll. So, \tiat2\ > \t[\. D 

Lemma 4.10. S-p^^^ is a stratification of Red}{VcLL)- 

Proof. We want to prove that, for each rule in Reduce{RcLL, Mt, Mp), S-Pcll 



satisfies the items (1), (2) and (3) in Def.[42] Let r e Reduce{RcLL, Mt, Mp). 
We distinguish cases based on the origin of r. Here, we only consider three cases 
as illustrations, the remainder is similar and omitted. 

Case 1 r originates from a rule in Ra2ground- 

Then, prem{r) C {ti — % t,t2 7^} and conc{r) — tint2 t for some 
ti,t2,t e T{Yicll) and a G Act. Clearly, it suffices to consider the case where 
prem{r) = {ti — ^ t,t2 7^}. It immediately follows from the definition of 
^VcLL tliat S-pcLLi^i^t^ t) > S-PclA^ t) and, for any s E T{Y.cll), 
> S-p^j^j^{t2 — > s), as desired. 



Case 2 r originates from a rule in Rpi2 



ground ' 
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Similar to Case 1, it is enough to deal with the case wher e r has the form 

*'^*ti7^2*F'*""'^ ^^^^ h A i2 h. By Lemma 4.9 \ti A tzi > l^al- 
Then, by the definition of S-p^^^, we have S-p^.^j^{ti A t2Fa) — 2 x |ii A > 
2 X 1*31 + 1 = Svcr^dhF) and ^p^^Jti A t2F^) > Svc^^h M2 ^ h). 

Case 3 r originates from a rule in RpiZground- 

Similarly, we treat the rule with the form >t3^tiAt2^f e» ^ immediately 

follows that SvcLhiti ^ t^F) > SvcLhi^i ^ *2 ^3) and Svcll^'^i ^ ^^F) > 
^VcLhi^i ^ *2^q), as desired. □ 

We now arrive at the main result of this subsection. 

Theorem 4.11. Vcll has a unique stable transition model. 

Proof. Follows from Theorem |4.8| and Lemma |4.10[ □ 

Notation Henceforward the unique stable transition model of Vcll is denoted 
by McLL- 

The LTS associated with CLL is defined below. 

Definition 4.12. The LTS associated with CLL, in symbols LTS{CLL), is the 
quadruple (T{1^cll), Act^, — >cll,Fcll), where 

— t ^CLL t' iff t ^ <' e McLL, 

— te FcLL iff e McLL- 

Since Mcll is a stable transition model, which exactly consists of provable 
transitions of the positive TSS Strip{'PcLL, Mcll), the result below follows. 

Theorem 4.13. Let t, ti, <2 G T{Y,cll) and a £ Actr. 

1. The following are equivalent: 

1.1. ti — >cll t2, 

1.2. ti i2 e Mcll, 

1.3. tl > t2 e Mgt„p(j,^^^ McLL)' 

1.4. Strtp{VcLL,McLL) hti^ t2. 

2. The following are equivalent: 

2.1. teFcLL, 

2.2. tF G Mcll, 

2.3. tF e Mstrip{VcLL,McLL)' 

2.4. Strip{VcLL,McLL) I- tF. 

Proof. Straightforward. □ 

The above theorem is trivial but useful. It provides a way to prove the 
properties of LTS{CLL) and Mcll- That is, we can demonstrate some con- 
clusions by proceeding induction on the depth of proof trees in the positive TSS 
Strip{VcLL, Mcll)- In the remainder of this paper, we will apply this theorem 
without any reference. 
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4-. 3. Basic Properties of LTS{CLL) 

This subsection will provide a number of simple properties of LTS{CLL). 
In particular, we will show that LTS{CLL) is a Logic LTS and it is r-pure. 
Some useful notations are listed below. 

t S iff t -^CLL S with t,S ^ FcLL- 

t =^CLL S iff t(^CLL)*S. 

t ^CLL s iff 3r,p e T{T.cLL)-t ^cll r -^cll P ^cll s. 

t =>F s (or, t =>F s) iff t =^cLL s {t =^cLL s, respectively) and all 
process terms occurring in this sequence, including t and s, are not in Fcll- 

t =>i? \s (or, t =^F \s) iff t =>F s {t ==>F s, respectively) and s is stable. 

A few simple properties of transition relation — >cll are listed in the next 
three lemmas, which will be frequently used in subsequent sections. 

Lemma 4.14. Let t, ti,t2 G T{Y.cll) and a,(3 £ Actr- Then 

1. a.t -^cLL f iff Oi — P and t = r. Hence, a.t -/^cll for any (3 ^ a. 

2. ti V ^2 ~~^CLL t iff ct — T, o,nd cither t = ti or t = t2. 

3. -f^cLL and _L -/^cll- 

4. 1ft — >CLL s then \t\ > |s|. Hence, there is no infinite transition sequence 
in LTS{CLL). 

Proof. (1) (Left implies Right) Assume a.t -^cll t' ■ Then, 

Strip{VcLL.McLL) y- a-t A t' . 

Further, since the axiom a.t t is the only rule whose conclusion has the 
head a.t, we get a = (5 and t = t' . 

(Right implies Left) Since — is an axiom in StripiRcLL, Mcll), we im- 
mediately get a.t — > t G Mqll- Hence, a.t — >cll t- 

(2) Similar to (1). 

(3) Assume that -^cll t' for some t' e T{Tjcll) and a e Actr. Since Mcll 
is a supported transition model, there exists a rule r e Rcll ground such that 
Mcll \= prem[r) and conc{r) = — ^ t' . However, there is no such ground 
rule, a contradiction. Similarly, _L -f^cLL holds for each a € Act^. 



(4) By Lemma 4.9 it follows from the fact that Mcll Q Mp. □ 

The properties in the above lemma hold for any kind of transitions (visible 
or invisible). The next lemma contains some simple properties which hold only 
for visible transitions. 

Lemma 4.15. Let ti,t2 E T{Yicll) and a,h E Act. Then 
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1. tiDta -^CLL h iff either ti -^cll h and t2 t^cll, or t2 -^cll h 
and ti -/-^CLL- In particular, a.ti\^b.t2 — >cll td, iff either a = a and 
ts = ti, or a = b and ts = t2- 

2. ti A t2 -^CLL h iffh -^CLL t'l, t2 -^CLL t'2 and ts = t[At'2 for some 

t' t' 

'-li ''2- 

Proof. (1) (Left implies Right) Suppose tiUt2 -^cll is- Clearly, the last rule 
applied in the proof tree of Strip{VcLL, Mcll) I~ t\Ot2 is is of the form 

t ^ ^ ^ Q ^ 

either with Mcll \= t2 7^ or with Mcll \= ti 7^ • 

tiOt2 > S t-iOt2 > S 

Then, we get either ti -^cll s, t2 -f^CLL and to, = s, or t2 -^cll s, 
h -/^CLL and ^3 = s. 

(Right implies Left) W.l.o.g, suppose ti -^cll ts and t2 -f-^cLL- Since 
Mcll h ^2 A, we get , e Strip{RcLL,McLL). So, iiDia ^ is e 

Mcll immediately follows from t\ — > ts S Mcll- 

(2) We shall prove that the left implies the right, the converse is trivial and 
omitted. Suppose ti A t2 -~-^cll is- Since a G Act, the last rule applied in the 
proof tree of Strip{VcLL, Mcll) I" ii A i2 is is of the form ''^ '''^'1^^ ^ 

tiAt2 >t'^At2 

for some t[, t'2. Thus, it follows that is = t'^ A t'2, ii i'l G Mcll and 
t2 t'2 e Mcll. □ 

The lemma below shows that the operators A and □ are static combi- 
nators w.r.t r-transitions, in other words, the structure that they represent is 
undisturbed by r-transitions. 

Lemma 4.16. Lei G A, □} and ti,t2 € T{T,cll) ■ Then, tiQt2 ^cll 
is iff there exists s such that either ti —^cll s andts = sQt2, ort2 —^cll s 
and ts =tiQ s. Hence, ii and i2 are stable ifft\ i2 is stable. 

Proof. (Left implies Right) Proceed by distinguishing cases based on the form of 
the last rule applied in the proof tree of Strip{VcLL, Mcll) I~ ii0i2 —^cll ts. 

(Right implies Left) It immediately follows from the fact that both — *^~r^*^ 

tlQt2 — >ti©i2 

and are rules in Strip{RcLL, Mcll)- □ 

tlCytg >-tiC!)t2 

The next lemma provides some basic properties of Fcll- 
Lemma 4.17. Let ti,t2 € T{T,cll)- Then 

1- ii,i2 e Fcll ifftiVt2 G Fcll- 



2. a.ti e Fcll iffti € Fcll- 
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3. Either ti G Fcll or t2 G Fcll iff h e Fcll for each G {□, |U}. 

4. Either ti G Fcll or t2 G Fcll implies tiAt2<E Fcll- 

5. Oi Fcll and _L G Fcll- 

Proof. We prove items (1) and (5), the others are shmlar and omitted. 

(1) Assume that ^1,^2 G Fcll- So, both tiF and t2F are in Mcll- Further, it 

follows from G Strip{RcLL, Mcll) that V ^2 e Fcll- 

Conversely, assume that ii V t2 € Fcll- Then, the last rule applied in the 
proof tree of Strip{VcLL, Mcll) ^hW t2F is So, we get ti G Fcll 

and <2 e i^cLL- 

(5) ± G Fcll immediately follows from G Strip{RcLL, Mcll)- Next, 
we prove ^ Fcll- Assume that OF G Mcll- Since Mcll is a supported 
transition model, there exists a rule r G Strip{RcLL, Mcll) such that Mcll \= 
prem{r) and conc{r) = OF. However, there is no rule which has the conclusion 
OF, a contradiction. □ 

An immediate consequence of the above lemma is that the operators a.{), 
V, □ and II A preserve consistency. More precisely, a.s and s Q t are not in 
Fcll if s,t ^ Fcll, where is any binary operator except A. Similar to 
conjunction in usual logic systems, the operator A doesn't preserve consistency. 
That is, the converse of (4) in the above lemma fails. For instance, consider 
the process terms a.O and 6.0. Clearly, by (2) and (5) in the above lemma, 
a.O ^ Fcll and &.0 ^ Fcll- However, by Lemma 4.14[ 1) and 4.16 we have 

Mcll N {b-0 A, a.O A 6.0 A}, hence G Strip{RcLL, Mcll)- Then, 

it is easy to see that a.O A 6.0 G Fcll- In fact, the above lemma doesn't 
completely capture the nature of Fcll, and further properties will be revealed 
in the subsequent. 

Lemma 4.18. Let ti,t2 G T{Y.cll) and a G Actr- If Mcll |= h A t2^F„ 
then G Fcll for each t^ such that ti A t2 -~-^cll H- 

Proof. Assume that ti A ^2 -^cll h with ^3 ^ Fcll- So, t^F ^ Mcll, which 
implies XAt^l' ^ Strip{RcLL,McLL)- Further, ti A i2^'a € Mcll comes 
from ti A t2 ^3 G Mcll, which contradicts Mcll \— ti A t2^Fa- □ 

As mentioned in Section 2, the notion of r-pure is introduced in [50], 
which is a technique constraint for Logic LTSs. Follows [HI [SU], this paper 
insists such constraint. SOS rules in Table [l] have reflected it, while the result 
below will formally show that the LTS associated with CLL is indeed T-pure. 

Theorem 4.19. LTS{CLL) is r-pure. 

Proof. It suffices to prove that for each t G T{Y,cll), 

t -^cLL implies $a G Act. t -^cll - 
We prove it by induction on the structure of t. 
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• < EE or i EE ±. 

By Lemma 4.14[ 3), it holds trivially. 

• t = a.ti. 

Assume that t —^cll and t -^cll for some a € Act. So, by Lemma 
we have a = t = a, a contradiction. 

• t = ti\/t2. 

Immediately follows from Lemma 4.14[ 2). 

• t = tiat2. 

Assume that tiOt2 



4.14 



1), 



4.16 



we get ti — >CLL for 



'CLL- Then, by Lemma 
some « S {1,2}. Further, by IH and Lemma 4.15 '1), it follows that iint2 -/^cll 
for each a e Act. 

• t = ti At2. 

Similar to tiUt2^ but using Lemma 4.15[ 2) instead of Lemma 4.15| ^1). 

• t = ti \\a t2. 

Assume that ti ||^ t2 --^cll- Then, by Lemma 



4.16 



we get ti 



^CLL 



for some i e {1,2}. By IH, we have ti -/^cll for each a G Act. Assume that 
ti \\a h — ^ s € McLL for some a € Act and s £ T{Y.cll)- Then, the last 
rule applied in the proof tree of Strip{VcLL, Mqll) ^ ti \\a h s has one of 
formats below. 



1. 
2. 



tl|Ut2- 
t2- 



tl|Ut2- 
tl 



>tl|Ur 



with a <^ A and Mcll \= ^2 7^, 
with a ^ A and Mcll h ^1 



3. with aeA. 

tl|Ut2 — >r\\Aq 

It is trivial to check that each case above leads to a contradiction, as desired. □ 

In the following, we shall prove that LTS{CLL) is a Logic LTS. We proceed 
by proving that both (LTSl) and (LTS2) hold in LTS{CLL). 

Lemma 4.20. LTS{CLL) satisfies (LTSl). 

Proof. It is enough to show that for each t E T{J^cll) 

3a e I{t) Vs(t -^cLL s implies s G Fcll) implies t e Fcll- 

We prove it by induction on the structure of t. 

• t = 0, ±, (3.tiOTtiVt2. 

Immediately follows from Lemma 4.17[ 1)(2) and Lemma 4.14[ 1)(2)(3). No- 
tice that, for t = or _L, it holds trivially due to I{t) = 0. 

• t = tiDt2. 

Assume that yt'{t -^cll t' implies t' e Fcll) for some a £ lit). Since 
a € I{t), we get tiOt2 --^cll i' for some t' . Consider two cases below. 

Case 1 a e Act. 

By Lemma 4.15[ 1), we have 

either a e I{t2) and <i -/^cll^ or a € 1{ti) and t2 -f-^cLL ■ 
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W.l.o.g, we consider the first alternative. In such case, it follows from Lemma 4.15[ 1) 
that 

V<2(^2 -^CLL t'2 implies ^10*2 -^cll ^2)- 
Thus, by the assumption, it holds that 

Visfe -^CLL t'2 implies ^ e Fcll)- 
So, by IH, ^2 G Fcll- Then, tiOt2 & Fqll immediately follows from Lemma 4.17[ 3). 
Case 2 a = T. 



So, by Lemma 4.16 it follows that either ti -^cll or ^2 —^cll- W.l.o.g, 
we consider the former. If i2 S Fcll then tint2 € Fcll comes from Lemma 4J7f^3) 
at once. In the following, we deal with the case t2 ^ Fcll- Firstly, it follows 
from Lemma 14.161 that 

Vi'i(^i -^CLL t[ implies hDt^ -^cll t[at2)- 
Then, by the assumption, we get 

yt[{ti -^cLL t'l implies t'iat2 G Fcll)- 
Further, by ^2 ^ Fcll and Lemma 4.17| [3), it holds that 
'it\{ti -^cLL t'l implies t'^ e Fcll)- 

So, by IH, ti e Fcll- Therefore, by Lemma |XT7]^3) , it follows that tiUt2 € 
Fcll, as desired. 

• t = ti M2- 

Assume that a G and s G Fcll for each s such that t -^cll s. 
Thus, ii A ^2 ^3 G McLL for some ^3. If ti A t2Fo, ^ McLL{i-e., Mcll h 
ti A t2^Fa) then G Strip{RcLL, Mcll), which, with the helping of 

ti At2 G Mcll, implies tiM2F G Mcll- Therefore, in order to complete 

the proof, it is enough to show that ti A t2Fa ^ Mcll- 

Suppose that ti At2Fa G Mcll- Clearly, the last rule applied in the proof 
tree of Strip{VcLL, Mcll) \- ti A ^2-^0 has the form below 

'^^'^^'^ with Mcll h ^4-^^. 

tl A t2Fa 

So, tl A t2 t4 G Mcll- Then, by the assumption, we get t^ G Fcll, which 
contradicts Mcll \= t^-^F. 

• t = ti \\a t2- 

Assume that Vs(t -^cll s implies s G Fcll) for some a G I{t). Since 
a G I{t), we have ti \\a ^2 —^cll t' for some t' . If a = r then the 
proof is similar to one of tiOt2, we omit it. In the following, we consider 
the case where a G Act. In such case, the last rule applied in the proof tree of 
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StripiVcLL, Mcll) ^ ti \\a t2 ---> t' has one of the following three formats. 

Case 1 — ^ A) with Mcll h h A- 

Then, t' = t[ \\a t2 and h t[ e Mcll- If ^2 e Fcll then, by 

Lemma 4.17[ 3), ti \\a ^2 G Fcll, as desired. Next, we consider another case 
where ^2 ^ Fcll- Since Mcll h= ^2 7^ and a ^ A, we get 

^ 1 e Strip{RcLL,McLL) for each i'/. 



lU ^2 lU ^2 

Then, it follows that 

V<i(ti ^cLL implies ti |U ^2 -^cll IU ^2). 
Moreover, by the assumption, we have 

yt'lih -^CLL t'i implies t'i IU t2 e Fcll)- 
Further, since ^2 ^ Fcll, by Lemma 4.17[ 3), it holds that 
Vi'i'(<i ^CLL ti implies t'{ e Fcll)- 

So, by IH, ti e Fcll- Then, by Lemma 4.17[ 3), ti \\a ^2 G i^cLi immediately 
follows. 



_t2 
1*2 

Similar to Case 1. 



Case 2 , „ *^^^„ ^ A) with A/cll h A- 

tl II At2 >tl 11^*2 



Case 3 ^v=^4^^#%(« e A). 

tl II At2 II At2 

In such case, we get ti -^cll t'i and t2 -^cll t'2- Thus, a G I{ti) and 
a e T{t2)- In order to complete the proof, it is enough to show that either 
tl e Fcll or t2 € Fcll- Assume that ti ^ Fcll and <2 ^ ^cll- Then, by 
IH, we get tl si € Mcll with si ^ i^cLL and t2 S2 G Mcll with 
S2 ^ Fcll for some si and S2. Since a g A, it follows that 

" > Si t2 " > S2 

e Strip{RcLL, Mcll)- 



tl \\a t2 > Si \\a S2 



Hence, ti \\At2 —^cll si ||a S2- Further, by assumption, we have si \\a S2 € 
Fcll- By Lemma 4.17[ 3), this contradicts si ^ Fcll and S2 ^ Fcll- □ 

In fact, (LTSl) can be strengthened so as to provide a complete character 
of non-stable processes in the set Fcll in terms of r-transitions. Formally, we 
have the result below. 

Lemma 4.21. If t £ I{t) then 

t e Fcll iff ^sit -^cll s implies s e Fcll)- 
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Proof. It immediately follows from Lemma 4.20 that the right implies the left. 
Another implication can be proved by induction on the structure of t, we leave 
it to the reader. □ 

As an immediate consequence, we also have, for each t e T{Y,cll), 

W{t ^cLL \t' implies t' e Fcll) ifft e Fcll- 

Although this result characterizes all processes in Fc ll , it isn't more interesting 



than Lemma 4.21 In fact, for stable process terms, this result is trivial. For non- 
stable process terms, since there is no infinite r-transition sequence in Mcll-, 
it isn't difficult to see that this result is implied by Lemma [4.21[ 

Lemma 4.22. LTS{CLL) satisfies (LTS2). 

Proof. It suffices to show that, for each t, ]it ^ Fcll then t ==^f \t' for some 
t' . We prove it by induction on the degree of t. Assume that it holds for all s 
with |s| < \t\. 

If t is stable, then t =^f \t follows from t ^ Fcll- Otherwise, since 



t 4- Fc ll an d r € 1(0; by Lemma 4.20 we have t — >p s for some s. By 
Lemma 4.14^4), we get \s\ < \t\. Then, by IH, we obtain s =^f W for some t' . 



Hence, t =^f \t'. □ 

It is now a short step to 
Theorem 4.23. LTS{CLL) is a Logic LTS. 

Proof. Immediately follows from Lemma [4.20| and |4.22[ □ 

In the next section, the relation ==^f \ will play an important role in devel- 
oping the behavioral theory of CLL. The remainder of this section is devoted to 
basic properties of it. 



Lemma 4.16 asserts that, for operators \\a, A and □, the structure that 
they represent is preserved under r-transitions. A possible conjecture is that 
such property may be generalized to the circumstance where the stability and 
consistency of process terms are involved, that is, these operators are also static 
combinators w.r.t the transition relation => f | . It turns out that this conjecture 
almost holds except that we need to add a moderate condition when considering 
the operator A. Formally, we have the result below. 

Lemma 4.24. Let e {□, |U, A} and ti,t2 £ T{T,cll). 

1. Lfti^F \t'i and t2 ^F \t'2, then ti \t'i t'^ for G {□, |U}, 
moreover, ti A ^2 =>f l^i A t'2 if t[ A t'2 ^ Fcll- 

2. If ti t2 =^F 1^3 then ti =^f Wi, ^2 ==^f 1^2 '^^'^ ^3 = © ^2 /'"^ some 

t'i,t^er(ScLL). 
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Proof. (1) We consider the case where = A, the others can be treated similarly 
and omitted. 

Suppose ti Wi, t2 =^F 1^2 ^i^d t'l At'2 ^ FcLL- So, we have ti = 

Sq --^f, ■ • • I Sn = t[ for some Sq, . . . , Sn with n > 0, an d t2 = Tq ~^f 

, . . . , F Trn = t'2 for some Tqi • ■ • 7 with m > 0. By Lemma 
to see that 



4.16 



it is easy 



ti f\t2 = Sq /\ Tq >CLL Si ATq, . . . , >CLL Sn A Tq 

>CLL Sn A Ti >CLL "Sn A T2, . . . , >CLL Sn A T„ 



t[At2. (4.24 



1) 



If n = m = then both ti and t2 are stable and ti = t[ for i = 1,2. So, 
ti A t2 =^F 1^1 A ^2 holds trivially. Next, we consider the case either n 7^ or 
m 0. Then, by Lemma 4.16 re T{p) for each process term p except Sn A Tm 
along the sequence (4.24 1). Further, since t'^ At'2 ^ Fcll, by Lemma 4.21 it is 



easy to know that p ^ Fcll for ea ch p occurring in (4.24 1). Moreover, since t'l 
and t'2 are stable, by Lemma 



4.16 



so is t[ A tj. Therefore, ti A ^2 



\t[At'^. 



(2) We shall treat the case where = A, the remaining proofs are similar and 
omitted. 

Suppose ti A t2 =^F 1^3- Then, for some n > and Si{i < n), we have 

ti At2 ^ Sq >F Si, ... , >F Sn = ^3 

In the following, we consider the non-trivial case n > 0. In such case, by 



Lemma 4.16 there exist tu,t2i{i < n) such that 



1. Si = tii A t2i for each i < n , 

2. either tu -^cll tu+i and t2i+i = t2i, or t2i -^cll t2i+i and tu+i = tu 
for each i < n. 



For each i < n, since Si ^ Fcll, by Lemma 4.17[ 4), we have iii,i2i ^ 
Fcll- Moreover, by Lemma [4.16[ since t^ = tin A t2n is stable, so are <i„ and 
t2n- Finally, we can obtain a r-transition sequence from ti to ii„ by removing 
duplicate process terms in the sequence {iii}i<Ti[^ So, ti =^f \tin- Similarly, 

t2 =^F \t2n holds. □ 

By the way, if the consistency is ignored, similar to the result above, it is 
not hard to show that, for each 0g{n,m,A}, 

1. If ti =>CLL \t'i and t2 =^cLL 1^2, then ti t2 =>cll \t'i t'2. 

2. If ti t2 ^CLL \t3 then ti ^cll \t'i, t2 ^cll |<2 and <3 = t'l © t'2 
for some € T(I]cll). 

We conclude this section with a useful result, which will be used in Section 5 
when we deal with distributive laws. 



^Notice that this r-transition sequence is empty if ti = ti„, i.e., ti is stable. 
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Lemma 4.25. Let G {□, A, \\a}- If h (t2 V t^) 1*4 then there is t[ 

and a sequence ti (i2 V ^3) = Tq ~^f, ■ ■ ■ , —^f Tn = t^ (n > 1) such that 
tl =^F t'l, Tj = t'i&{t2^ H) andTj^i = t'^Qt^ for some j < n and k € {2,3}. 

Proof. Wc consider the case where = A, the others are handled in a similar 
way. Let ti A {t2 V t3)(^^F)"|*4('^ > 0). Since <2 V -^cll, we get ti A {t2 V 
^3) — >CLL- So, n > 1. We proceed by induction on n. 

For the inductive basis n = 1, since is stable, by Lemma 4.16 and 4.14[ 2), 



the last rule applied in the proof tree of Strip{VcLL, Mcll) I" A(i2 Vts) — > ti 
is 

i2 V i3 ^ <2 t2 V <3 ^3 

either or . 

h A {t2 V ^3) — ^ tl A t2 hh {t2 V t3) ii A ^3 

W.l.o.g, we consider the first alternative. In such case, t^ = ti A t2 an d we ^ et 
the sequence Tq = A (^2 V ^3) -^f \Ti = ti At2- Hence, by Lemma 



4.16 



t^ 



is stable. Moreover, since ti A (^2 ^ t?,) ^ Fcll, by Lemma 4.17[ 4), we have 



tl 4- FcLL- So, tl =^F \ti- Then, t'l = ti and j = are what we need. 

For the inductive step, assume tiA(t2Vt3)(^^F)''^"^|t4- So, tiA(t2Vi3) —^f 
t5(— ^i?)*''|t4 for some ^5. We distinguish two cases based on the form of the 
last rule applied in the proof tree of Strip{VcLL, Mcll) \^ ti A (^2 V ts) — ^ t^. 

Case 1 



tlA(t2Vt3) >t{A{t2Vt3) 

So, tl t'l e Mcll and ^5 = t'l A (t2 V ^3). By IH, there exists a sequence 
t'l A {t2 V ^3) = Tq -^f, . . . , -^F = ti{m > 1) 
and for some and j < m, we have 

1. t'l =^F t'l, 

2. Tj =t'{A (t2 Vt3) and 

3. either Tj+i = t'( A t2 or Tj+i = t'( A t^. 

Moreover, by Lemma [4T7| 4) , ti ^ Fcll and t'l ^ Fcll follow from ti A (^2 V 



H) ^ Fcll and t'l A (^2 V ^3) ^ Fcll, respectively. Then, we have the sequence 
below 

tl A {t2 V ^3) -^F t'l A {t2 V ^3) = To -^F, ^F T„, = ti 

and tl -^F t'l ^F t'(, Tj = t'( A {t2 V t^,) and either Tj+i = t'l A ^2 or 
Tj+i = t'l A ^3, as desired. 



Case 2 



t2Vt3- 



tlA(t2Vt3) HiAte 



So, t2 V t3 — > tg G ^Icll and ts = ti A tg- Moreover, by Lemma 4.14 '2), 
either tg = t2 or tg = t^. Clearly, we have the sequence ti A (^2 V ^3) — 
tl A tg(— H'F)''|t4, and, t'l = ti and j = are what we need. □ 
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5. Behavioral Theory of CLL 



This section will develop the behavioral theory of CLL. Follows ^217, the 
notion of ready simulation below is adopted to formalize the refinement relation 
among process terms, which is a modified version of the usual notion of ready 
simulation (see, e.g., 12 ). We will only care about the properties of ready 
simulation which are needed in establishing the soundness of the axiomatic 
system AXcll in the next section. 

Definition 5.1 (Ready simulation ^gOj). A relation 7^ C T{J:cll) x T{T.cll) 

is a stable ready simulation relation, if for any (t, s) ^ TZ and a G Act 

(RSI) t, s stable; 

(RS2) t i FcLL implies s ^ Fcll; 

(RS3) t =^F \t' implies 3s'. s W and (t' , s') G 7^; 

(RS4) t ^ Fcll implies I{t) = Z(s). 

We say that t is stable ready simulated by s, in symbols t \Z s, if there 

exists a stable ready simulation relation TZ with (t, s) G TZ. Further, t is said to 
be ready simulated by s, written t Qrs s, if 

yt'{t \t' implies 3s'{s =^f \s' and t' C s')). 

It is easy to see that both IZ and Qrs are pre-order (i.e., reflexive and transi- 

~RS 

tive). The equivalence relations induced by them are denoted by ~rs and —rs, 
respectively. That is, 

-RS^^ n(c and =fis = Efls n(Ei?.s)"^ 

~RS ~flS 

The identity relation over stable process terms is denoted by Ids- It is obvious 
that both Ids and C are stable ready simulation relations. 

~RS^ 

The remainder of this section is taken up with proving (in)equational laws 
concerning =rs {Qrs, respectively). These laws capture inherent properties of 
composition operators, e.g., commutativity, associativity and zero element. A 
number of laws obtained by Liittgen and Vogler in [20] , which are needed in the 
next section, will also be rephrased in process-algebraic style. In particular, we 
will show that the ready simulation is a precongruence, that is, it is preserved 
by all algebraic contexts. 

We begin with the laws about _L and r occurring in prefix construction. 

Proposition 5.2 (Prefix). 

1. a._L =Rs -L. 

2. T.t =Rs t. 



Proof. (1) Since _L e Fcll, by Lemma 4.17[ 2), we have a._L e Fcll- So, 
a._L —Rs -L holds trivially. 
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(2) Firstly, we prove r.t C^^s t. Suppose r.t =>f \t' ■ So, r.t 
Then, we have t =^f \t' and t' □ t'. 



'RS 



Secondly, we prove t '''■t- Suppose t =^f W ■ Then, r.t ~^cll t =>f 
\t'. Moreover, by Lemma 4.17[ 2), r.t ^ Fcll follows from t ^ Fcll- Thus, 
T.t =^F \t' and t' □ t' , as desired. □ 



■'RS 



The second set of (in)equations focuses on the properties of the combinator 



V. 



Proposition 5.3 (Disjunction). 

1. tiVt2 ^Rsh'^h- 

2. (tiVt2)Vt3=i?stiV(i2Vi3)- 

3. t\Jt=Rst. 

4. ty L=Rs t. 

5. ti \=Rs ii Vt2. 

Proof. (1) It is enoug h to p rove ti V t2 ^rs t2 V ii. Suppose ti V t2 ==>f \t' ■ 

'2) that ti V t2 -^F ti =>F \t' for some i e {1,2}. 



4.14 



It follows from Lemma ^ 

W.l.o.g, assume that i — 1. Since ti V t2 ^ Fcll, by Lemma 4.17[ 1), we 
get ^2 V ti ^ Fcll- Further, it follows from t2 V ti -^cll ti ==>f that 
^2 V ti =^F |i' and t' C t'. Thus, ti V t2 Cjis ^2 V ti. 

(2), (3) Similar to (1). 



(4) Firstly, we prove tV ± Qrs t. Suppose t\/ ± ^f |^'- By Lemma 4.14 2), 
we have i V _L — ^f t" =>f \t' with either t" = t ot t" = _L. Further, since 
-L e Fcll and t" ^ Fcll, we get t" = t. Thus, t =^f |t' and □ t' . 



^RS 



Secondly, we prove t ^rs t V _L. Suppose t =>f \t'- By Lemma 
t V _L ^ -Fcll foUows from t ^ Fcll- Further, since t V _L -^cll t - 



4.17 



1), 



we obtain t V . 



>F|<'andt'lZ f. 

~RS 



(5) Straightforward. □ 

In the following, we will consider (in)equational laws about the operators □, 
11^1 and A. For convenience, we adopt the convention below: 

Convention 5.4. When treating (in)equations E{ti, . . . , t„) f^Rs E'{ti, . . . , i„) 



5.5 



5.7 



(or, E{ti,...,tn) □ E'{ti,...,tn)) in Prop 

~RS , , 

that ti ranges over stable process terms for 1 < z < n 



5.8 



and 



5.9 



we assume 



The next group of equations is concerned with the operator □. 
Proposition 5.5 (External Choice). 

1. tiat2 ^RS t20ti. 
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2. tiat2 ^R.S t20ti. 

3. {tiat2)at3 '^^Rs hD{t2at3). 

4. {tiat2)at3 =Rs ha{t2at3). 

5. tat^jis t. 

6. tat =Hs t. 

7. tUl. =jis ±. 

8. too «fls 

9. too =Rs t. 

Proof. We will prove (1), (2) and (7) one by one, the other parts of the propo- 
sition are handled in a similar way and omitted. 
(1) It is enough to prove tiUt2 C t2ati. Put 

7^ = {(^l□^2,^2□^l)}u/ds. 

We want to show that the relation 7?. is a stable ready simulation relation. It 
suffices to prove that each pair in TZ satisfies (RS1)-(RS4). It is trivial for pairs 
in Ids- In the following, we consider the pair (tint2, t2l^^i)- It immediately 
follows from Convention 5.4 Lemma 4.16[ 4.17[ 3) and [4.15 |1) that this pair 
satisfies (RSI), (RS2) and (RS4). 

(RS3) Suppose tiUt2 ^F \t'. S ince tiUt2 is stable, ^10*2 -^pt" \t' 
for som e t" . Then, by Lemma 4.15 '1), we get t2nii -^cll t" . Moreover, by 

3), t20ti 



4.17 



Lemma 
f \t' and (t',t') e TZ 



FcLL comes from tiat2 i Fcll- So, t2ati 



(2) We shall prove tiUt2 C_rs t2'ati. Suppose ^10^2 
Lemma [424j [2) that 



>F \t' ■ It follows from 



ti =>F \t'i,t2 ==>F K2 s-nd t' = t\ut'2 for some t\^t'2- 

■p \t'2'i^t'i. Further, by item (1) in this 



So, by Lemma 4.24 '1), we get t2'ati 
lemma, we obtain tiOt2 Qrs t20ti. 



(7) Since _L e Fcll, by Lemma 4.17[ 3), we have tO± £ Fqll for each t G 
T{T,cll)- Then, ta± =rs _L holds trivially. □ 

In order to treat (in)equations concerning the operator A, the next two 
lemmas are needed. 

Lemma 5.6. If ti C ^2, C ^3 and ti ^ Fcll, then t2 A is ^ Fcll- 

~ RS ~ RS 

Proof We prove it by induction on the degree of ti. Suppose that it holds for 
all s such that \s\ < \ti\. Assume that ti ^ Fcll, ti □ ^2 and ti □ ^3. 

~RS ~flS 

Thus, it follows at once that t2 ^ Fcll, ^3 ^ Fcll and 2{ti) — 1(^2) = ^^(is)- 
Assume that t2 At^ S Fcll- We distinguish cases based on the form of the last 
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rule applied in the proof tree of Strip{VcLL, Mcll) I" ^2 A t^F. 



1 t2M3F ■ 

Then, G Mcll, which contradicts t2 ^ Fqll- 
Analogous to Case 1. 



Case 3 



with Mcll h {ts A, ^2 A 7^}. 



So, t2 —^CLL t'2 ^^^d ~^cll, which contradicts I(t2) — T^i^z 



Case 4 



t2l\HF 

Similar to Case 3 



with Mcll h {^2 A, ^2 A H A}- 



Case 5 



t2/\t3- 



t2At3_F 



with Mcll h ^2 A h^Fa- 



ti 
So, ii 

that 



4.16 



Thus, t2A<3 — > t/^ G Mcll- Since both ^2 and ^3 are stable, by Lemma 

so is t2 A ^3. Hence, a ^ t. Then, by Lemma 4.15| [2), a G I{t\) due to 
T{ti) — T{t2) = Further, by Lemma 4.20 it follows from ti ^ Fcll that 

t'l for some t[. Then, by Lemma 4.22 we have t[ =^f \ti for some t'{. 



I we have t[ - 

Hence, it immediately follows from ti \Z 
t2 =>F 1^2 and t'l □ ^2 for some ij. 



^2 and ti C ^3 

RS ^RS 



■'RS 



(5.6 



>F 1^3 and t'l □ ^3 for some ig. 

~RS 



(5.6 2) 



4.18 



Since ^2 and i3 are stable, it follows from (5.6 1) and (5.6 2) that, for i = 2, 3, 
ti -^F t'l =>F \t'i for so me i-. So, by Lemma 4.15 |2), t2 A t^ -^cll t'2 A t'^. 
Further, by Lemma 



and Mcll H ^2 A t^^F^, we have 
^2 A ^3 G Fcll ■ 



(5.6 3) 



On the other hand, since t'l ^ Fcll and \t'l\ < \ti \, by IH, ^^1) and ^^2), we 
obtain t'2 A ^ Fcll- Further, by Lemma 



4.24 



1), it follow s fro m t'2 



and tg ^'i;- that t'2 A tg =4>i? jtj A tg, which contradicts (5.6 3) 



□ 



Lemma 5.7. 

1. ti At2 C t, fori^ 1,2. 

2. tiAt2 Ci^5^. /ori = l,2. 

3. If ti □ ^2 and ti IZ t3, then ti C i2Ai3. 

~i?.s ~i?s 

4. //ii Cfls h and ti ^rs h, then ti C^g ^2 A is. 

Proof. (1) We will prove ii A t2 C ti. The proof of ii A ^2 C ^2 is similar 
and omitted. Put 



TZ^ {(s A i, s)| s and t are stable}. 
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By Convention |5.4[ it is enough to prove that 7?. is a stable ready simulation 
relation. Let {ti A t2,ti) e TZ. By Lemma [4.16 and 4.17| [4), it immediately 
follows that the pair {h A t2, ti) satisfies (RSI) and (RS2). We will prove (RS3) 
and (RS4) below. 

(RS3) Suppose ti A t2 =>f \ti2- Since ti A t2 is s table , we get A ^2 

/' 

'-12 



>p \ti2 for some t'i2- So, it follows from Lemma 4.17^4) and 



4.15 



F 

2) that 



ti — ^ F t'l , t2 — — > F t'2 ^nd t'i2 = i 1 A t'2 for some t'^ , t'2 ■ 



4.24 



2), we obtain t\ =^f \t'l, t'^ =^f 

" ■pt'^=!,p \t'i and {ti2,t'l) e n. 



Since t\ A t'^ =>_f \ti2, by Lemma 
and ti2 = t'l A ^3 for some i", ^2 ■ Hence, 

(RS4) Suppose ti M2 ^ Fcll- We want to prove I{ti M2) = I{ti). It 
is straightforward that T{ti A ^2) ^ I{tx). Next, we show A 12) ^ 
Let a £ I{ti). Thus, <i -^cll t'l for some i'j^. Assume that a ^ I{t2)- So, 

^^=^ e Strip{RcLL,McLL) comes from Mcll |= {tiAt2 ^,^2 A}- Then, 
A t2^' G McLL immediately follows, a contradiction. 



(2) Suppose ti A t2 =>_F 1^12- By Lemma 4.24^2), there exist t'i,t2 such that 
ti ==^F \t'i, t2 =^_F 1^2 s-i^d ii2 = t[ A t'2. By item (1) in this lemma, we have 
t'l At'2 \Z t'l- Hence, ti A t2 ^rs ti holds. Similarly, ti A t2 Qrs t2 holds. 



'RS 



(3) Put 



7^ = {(s,r At)|s C randsC t}. 

~RS ^RS 



We intend to show that 7?, is a stable ready simulation relation. Let {ti ,t2At^) G 
TZ. By Lemma 4.16 and 5.6 it is easy to see that {ti,t2At3) satisfies both (RSI) 
and (RS2). 

(RS3) Suppose ti =^f \t'i- Since ti is stable, ti -^f t'{ =^f \t'i for 
some t'(. It follows from ti □ ^2 that t2 ==>f |^2 and t'^ □ t'2 for some t'2. 

~flS ~RS 

Similarly, t^ =>f 1^3 and t'l \Z t'^ for some t'^. Further, by Lemma 



'RS 



5.6 



we 



get t'2 At'^ ^ FcLL because of t'^ ^ Fcll- Moreover, since ^2 and ^3 are stable, 

>f t'3 =»F 14 for some t'2,t'^. Then, it follows 



t2 



>F t2 



from Lemma 4.24 1) that 



>F K2 and t^ 



t'^At'i 



It'^Ai'g. 



(5.7 3.1 



Since t2 -^cll t'2 and t^ -^cll t'^, by Lemma 4.15 '2), we get 



t2 A ts >CLL ^2 ^ *3 • 



(5.7 3.2) 



By Lemma [K6| t2 A ts ^ Fcll due to ti ^ Fcll- Then, by ((5J]3.1) and 
([5j]3.2), wc obtain ^2 A i3 Af t!{ A t'!^ Af 1^2 A t'^ and (ii, A t^,) G 7^ . 
(RS4) Suppose t\ ^ Fcll. It follows from C t2 and ii □ i3 that 

~RS ~RS 

I(ti) = 1(^2) = 2^(i3)- Further, since ti, t2 and t3 are stable, we get I(ti) C Act 
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for i — 1,2, 3. Hence, by Lemma 4.15| ^2), we have X{ti) = I{t2 A ^3). 



(4) Suppose ti =^F Wi- It is enough to find s such that t[ C s and U A 
^3 =^F \s- Clearly, it follows from ti ^rs ^2 that t2 =^f 1^2 ^^d t'l C t'2 for 

^RS 

some t'2. Similarly, ^3 =^f and t[ □ for some tg. We will check that 

~RS 

^2 AtJj is exactly what we need. By item (3) in this lemma, we get t[ C ^2 ^^3. 
Further, t2 At'^ ^ Fcll comes from t[ ^ Fcll- Then, by Lemma 4.24[1), we 



obtain t2 A ^3 =^f |^2 A ig, as desired. 



□ 



As an immediate consequence of items (2) and (4) in the above lemma, the 
property below is given, which has been obtained in |20j . 

ti Qrs h A ts iff ti Qrs t2 and ti CIrs ts. 

As pointed out by Liittgen and Vogler in |2D], this is a fundamental 
property of ready simulation in the presence of logic operators. Intuitively, it 
says that ti is an implementation of the specification t2 A ^3 if and only if ti 
implements both t2 and t^. 

We now are ready to prove some basic properties of the operator A. 

Proposition 5.8 (Conjunction). 

1. ti A t2 ~RS t2 A ti. 

2. tl A t2 =RS t2 A ti. 

3. {tiAt2)At3»RstiA{t2At3). 

4. {tiAt2)At3=RstiA{t2At3). 

5. tAt»Rs t. 

6. tAt=Rst. 

7. tA±^Rs±. 



Proof. (1) By Lemma 
Lemma 



5.7 



5.7 '1), ii A ^2 C tl and ti A t-, n ^2- Then, by 

\ ~flS ~RS 

3), tl A i2 □ t2 Ati. Similarly, t2 Ati \Z ti At2. 
~RS ~fl.S 



(2) Similar to (1), it follows from Lemma 5.7 12) and|5.7[4) 



(3) By Lemma 5.7 1), (ii A t2) At^ \Z ti for i — 1,2, 3. Then, it immediately 

I _r , , ~i?s 

follows from Lemma 



5.7 '3) that (tl A ^2) A t3 □ ti A (t2 A tg). Similarly, 

~RS 



tlA(t2At3)C (tlAt2)At3. 
~RS 

(4) Similar to (3), but using Lemma [5.7[ 2)(4) instead of Lemma |5.7[ l)(3). 

(5) Immediately follows from Lemma [5 . 7[ 1 ) ( 3) . 

(6) Immediate consequence of Lemma [5?7j[2) (4) . 
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(7) By Lemma [4T7l ;4), tA±e Fcll follows from _L € Fcll- Then, it holds 
trivially that t A _L ~rs -L- □ 

The next lemma records some simple properties of the operator \\a- 

Proposition 5.9 (Parallel). 

1. tl \\a t2 ~RS t2 \\a tl- 
2- tl \\a t2 =RS t2 \\a tl- 

3. t\\Al. ^RS ±- 

4. lU 0=^5 0. 



Proof. Analogous to Prop. 5.5 



□ 



In the following, we will show that C_rs is a precongruence. We first prove 
that the operators □, ||^ and A are monotonic w.r.t C 

^RS 

Lemma 5.10 (Monotonic w.r.t C ). If ti □ t2 and is stable, then 

1. tiDia C t2at3, 

~RS 

2. tl A ^3 C t2 A ts, 

~RS 

3. tl lUtg □ t2 \\At3. 

~RS 

Proof. (1) Assume that ti C t2 and ^3 is stable. Put 

n = {{tiat3,t2at3)}un . 

It suffices to show that 7?, is a stable ready simulation relation. Clearly, by 

Lemma 4.16 both tiOt2 and t20t3 are stable, that is, (RSI) holds. In the 

following, we show that the pair (tint3, ^20^3) satisfies (RS2)-(RS4). 

(RS2) Suppose t2at3 e Fcll- By Lemma [4171 (3), t2 G Fcll or ^3 e 

Fcll- For the first alternative, it follows from ti □ ^2 that ti € Fcll- So, 

~RS 

tiOts € Fcll- For the second alternative, by Lemma 4.17[ 3), tiOt^ e Fcll 
immediately follows. 

(RS3) Suppose tiOt^ =^f \t13- Since tiDt^ is stable, it follows that 



tiOt^ ^13 =^F 1^13 for some t'^^. 

Since tiDt^ ^ Fcll, by (RS2), we get 

t2^t3 i FcLL- 



(5.10 1.1) 



(5.10 1.2) 



The argument now splits into two cases depending on the form of the last rule 
applied in the proof tree of Strip{VcLL, Mcll) I" ^10^3 -2-> t'^^. 



Case 1 



- with Mcll |= t3 Z^- 
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So, t'i3 EE t[ and h t[ e Mcll- Then, by Lemma [Zl7| ;3) and |5.10[ l.l), 
we have ti t[ =>f \ti3- It follows from ti □ t2 that t2 =>f 1^2 

~RS 

ti3 C t2 fo'" some tj. Moreover, since t2 is stable, we get 



t2 — ^2 1^2 for some ^2'. 



(5.10 1.3) 



Further, it follows from Mcll \= ts 7^ that 
Thus, 



*2 — 



- e StripiRcLL, Mcll)- 



(5.10 1.4) 



Hence, by ( |5.10| l.2), ( |5.10| l.3) and ( |5.10| l.4), we have 12^1^ -^f t'^ K 
and (ti3,i2) e 7^. 



Case 2 



- with Mcll h 



Hence, i']^3 = ^3 and tj, 



^3 G Mcll- Since i2 is stable, it follows 



that 



e Strip{RcLL,McLL)- So, t2ni3 



^3 e Mcll. Then, by 



( |5.10| l.l) and ( |5.10| l.2), we have ^20^3 -^f ^3 Kis and (ti3,fi3) € 7^, as 

desired. 

(RS4) Suppose tiOts ^ i^cLL- So, by Lemma|4T7t3), ti ^ Fcll- Hence, 
I{ti) — T{t2) due to tl \Z t2- Further, by Lemma|4.15ri), we get I{tiUt3) = 

~ Fig 

I{t2at3)- 



(2) tl A ^3 C h and h At^ n. h (by Lemma 5.7 '1)) 

~RS ~RS 

tl A ts IZ t2 and ti A t3 □ ^3 (by ti IZ t2 and IZ is transitive) 

~RS ~RS ~RS , , ~RS 

tl A ta IZ t2 A t3 (by Lemma ^/Tl 3)) 
~RS ' ^ 



(3) Put 



TZ^ {(s \\a t,r \\a t) \ s n r and t is stable}. 

~RS 



We want to show that 7?. is a stable ready simulation relation. Let (ti \\a 

h.t2 \\Ah)^n. 

(RSI) Since ti, t2 and t3 are stable, by Lemma 4.16 so are ti \\a and 

t2 lU ^3- 

(RS2) Suppose t2 |U h e Fcll- So, by L emma |4.17[ ;3), t2 e Fcll or 

3) , it immediately follows that 



ts e Fcll- Then, by ti Z t2 and Lemma 4.17 

tl \\a ts e FcLL- 

(RS3) Suppose ti ||^ t3 =>f 1^4- Since ti ||^ t3 is stable, ti ||^ t3 -^f 
ts |t4 for some ts. We consider three cases based on the form of the last 

rule applied in the proof tree of Strip{VcLL, Mcll) I~ ti \\a H — ^ t^. 



Case 1 



*1 11/1*3 



>*'i II A*; 



with a ^ A and Mcll |= h 7^- 
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So, <5 = t[ \\a ts and ti t[ G Mcll- By Lemma 4.24 '2), it follows 



from i']^ m ^3 = ^5 ==^F \ti that i'j^ 
some t'l,t'^. Since ^3 is stable, t'^ = t?, 
So, ti — >p t'-t 



>p \t'l, ts =^F 1^3 and ti = t'l \\a for 
It is easy to see that ti,ty,,t'i ^ Fcll- 

PcLL, 



•^3 = ''3- 

v-^ — \t'(. Further, since ti □ t2, we obtain t2 
^2 \q and t'l C <!j' for some tj. Since t2 is stable, there exists t'2 such 



'RS 



that t2 — ^'.F t'2 
that 



p \t'2, further, by Lemma 4.24 |1) and t^ 

t'2 \\a tz =^F 1^2 lU ^3- 
Moreover, since i3 is stable and a ^ A, we obtain 



>p 1^3, it follows 



(5.10 3.1 



t2 



t'. 



e Strip{RcLL,McLL)- 



Hence 



*2 lU *3 5- t'2 \\a tz 



t2 \\a ts t'2 \\a ts e Mcll- 



5.10 3.2) 



Further, since t2 ^ Fcll and ^3 ^ Fcll, by Lein ma [4.17 ^3), we get t2 \\a ts ^ 



Fcll- Thus, it follows from (5.10 3.1) and (5.10 3.2) that t2 \\a ts 



ts. Moreover, {t'( \\a t^.t'^ \\a ts) £ 7^ due to t'{ □ 



'RS 



f" 

''2- 



Case 2 



tl!Ut3 >ti\\At 

Similar to Case 1 



7 with Mcll h ^1 and a ^ A. 



Case 3 



with a ^ A. 



tl II A*3— II Atfj 

We invite the reader to check it. 

(RS4) Suppose ti \\a t^ i Fcll- We will prove |U ^3) ^ I{t2 \\a ts)- 
Assume that a S X(ti \\a t^). Then ti \\a is -^cll ^4 for some ^4. In the 
following, we consider three cases based on the form of the last rule applied in 
the proof tree of Strip{VcLL, Mcll) ^ ti \\a is ^4- 

Case 1 with a ^ A and Mcll h ^3 t^- 

tl \\At3 >-t'i II Ats 

So, ti = t'l \\a ts and ti t'l e Mcll- Then, a G I{ti). Since ti \\a ^3 



Fcll, by Lemma 4.17[ 3), we have ti ^ Fcll- So, I(ii) = 1(^2) comes from 
tl C i2- Then, ^2 — S'cll ^'2 for some t'2- Since a ^ ^ and Mcll \= t^ -/~^, we 

get , „ *'"t''?„ ^ e Strip{RcLL,McLL)- So, |U ^3 ^ ^'2 lU t3 e AfciL- 

*2||AI3 >-*2llAt3 

Hence, a e 1(^2 |U *3)- 



Case 2 



— with a ^ A and Mcll |= 



Similar to Case 1. 
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Case 3 '\7^'''a'i^'\ with a e A. 

tl II A*3 II 

Thus, tl — % t[ e McLL and ^3 tg e Mcll- Similar to Case 1, we get 
t2 -^CLL t'2 for some t'2. Further, since a G A, <2 |U *3 ^2 lU ^3 G Mcll 
follows from *^„~~'*^o*^^:7*^, € Strtp{RcLL, Mcll)- Thus, a e I(i2 |U ^s)- 

^2 II A t3 II Atg 

Similarly, we can show Hyi is) I) ^^(^2 ||a ^3)- D 

Lemma 5.11 (Monotonic w.r.t ^rs)- For any e A, |U, V}, if ti Qrs h 
then tl C^g ^2 ^3 for each t^ G T{Y.cll)- 

Proof. For = A, it immediately follows from Lemma [5.7[ 2)(4). Next, we 
consider =\\a, the remaining parts raise no significantly different issues and 
omitted. Suppose ti \\a t^ ==^f \ti3 - It i s enough to find s such that t2 \\a 
ts \s and ^13 □ s. By Lemma 4.24 '2), we have ti l^'i, ^3 =>f 1^3 

-■'RS 



and ii3 = t'l \\a t'^ for some t'i,t'^. Moreover, it follows from ti Qrs ^2 that 

im( 

what we need. Clearly, by Lemma 



t2 =^F 1^2 and t[ n. t'2 for some t'^. We will check that t'2 \a ^3 is exactly 
'RS , 

;3), t'l lU 4 C t'^WA t'3. And, by 



Lemma 



4.24 



5.10 



1), we get t2 \\a ta =^f 1*2 



RS 

A ^3, as desired. □ 



We can now state an important result about ready simulation relation, which 
reveals that C/fs is substitutive under all our combinators. 

Proposition 5.12 (Precongrucncc). If ti ^Lts ^2 o,nd Si ^rs S2, then 

1. a.ti ^Rs Oi.t2 for each a € Actr and 

2. tl si Qrs t2 S2 for each g {□, A, |U, V}. 

Proof. (1) The argument splits into two cases depending on the kind of a (vis- 
ible or invisible) . The proof is straightforward and omitted. 



(2) By Prop. [5?3[1), [5?5|;2), [5^2) and[5J];2), satisfies commutative law for 
each g A, m,V}. Then, it immediately follows from the transitivity of 
Qrs and Lemma [5.111 □ 

Hitherto we have only considered (in)equational laws involving one operator 
alone. Next, we shall deal with a few of laws which refer to different operators 
in one (in) equation. More such laws will be treated in the next section when 
establishing the soundness of AXcll- 

Proposition 5.13 (Distributive). ii0(t2Vt3) =rs (^i ©^2) V (^i 0^3) for each 

e {□,|U,A}. 

Proof. We consider the case where = □, the others are similar. 

Firstly, we prove tiU{t2 V ^3) Qrs {ti^t2) V [tiUtj,). Suppose tiU[t2 V 



^3) =>F 1^4- Then, by Lemma 4.25 there exists t'l and a sequence tiU[t2W t^^) 
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To -^F, ...,^FTn = ti{n > 0) such that h A, Tj = t\U{t2yh) and ei- 

ther Tj+i = t'iUt2 or Tj+i = t\ Ot^ fo r some j < n. W.l.o.g, assume that Tj+i = 



4.16 



and 



4.14 



t'iOt2. So, by Lemma 
tiOt2 =^F \ti- Further, by Lemma 
Then, it follows from t4 C that tiD{t2 V is) ^rs (^10*2) V (tiQts). 



2),iiini2) V (hats) -^cLL hat2 =^cll 

1)(3), (tiOta) V (tiOtg) 1*4. 



4.17 



Secondly, we prove (tint2) V (hata) C^s iin(i2 V is). By Prop [K3[l)(5), 
we have t2 E_rs h V ^3 and *2 V ^3. Further, by Prop. 5.12[ 2), we get 

tiat2 Qrs tia{t2\/t3) andiiKa Efls ha{t2\/t3). Then, (iire2)V(tini3) Ei?,s 
tia{t2 V ^3) comes from Prop. \5.12[2) andjs^la). □ 



Proposition 5.14. a.tiOa.t2 EflS a.{ti V 12) for each a G Act^ 



Proof, ti \Zrs ti V t2 and ^2 Ei?.s V ^2 (by Prop. 

oi.ti Qrs a.{ti V ^2) and a.t2 Ei?,s a.(*i V 12) (by Prop. 
=^ a.hUaM Qrs a.(ti V tz) (by Prop. ]5l2| ;2) and [5^6)). 



M,i)(5)) 

gi)) 



□ 

A natural problem arises at this point, that is, whether the inequation below 
holds 

a.(ti V <2) ^R.s a.ti^aM- (DS) 
The answer is negative. For instance, consider ti = _L and t2 = 0. By 



Lemma 4.17 we have a.{ti V*2) = a.(_LVO) ^ Fcll and a.tiUa.t2 = a.-LDa.O G 
-FcLL- Thus, it doesn't hold that a.(± V 0) Qrs a.LUa.Q. 

We conclude this section with the next proposition, which establishes a nec- 
essary and sufficient condition for the inequation (DS) with a G Act to be true. 
To this end, we introduce the notion below. 

Definition 5.15 (Uniform w.r.t Fcll)- Two process terms t and s are said to 
be uniform w.r.t Fcll if * € Fcll iff s G Fcll- 

Proposition 5.16. For each a G Act, a.{ti V <2) EflS a.tiOa.t2 iff ti and t2 
are uniform w.r.t Fcll- 

Proof. (Left implies Right) Suppose ti and t2 are not uniform w.r.t Fcll- 



W.l.o.g, assume that ti G Fcll and ^2 ^ Fcll- By Lemma |4.17[ we get 
a.{ti V t2) Fcll and a.t^Ua.t2 G Fcll- Hence, a.(ii V ^2) %rs a.t]Ua.t2. 



(Right implies Left) Since a G Act, by Lemma 4.14[ 1) and |4.16| both a.t\^a.t2 
and a.(t\ V ^2) are stable. So, it is enough to prove a.(t\ V t2) □ a.tina.t2- 

Put 

7^ ^ {(a.(ii V t2),a.txna.t2)'\ U Ids- 

We need to show that 7^ is a stable ready simulation relation. It is trivial to 
check that (RS1)-(RS4) hold for each pair in Idg. In the following, we treat 
the pair (a.{t\ V t2),a.t\Ua.t2). By Lemma 4.14 11), 4.15[ 1) and 4.16 this pair 
satisfies (RSI) and (RS4). 
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(RS2) Suppose a. Da. t2 & Fcll- By Lemma 4.17 it follows that £ Fcll 
for some i € {1,2}. Further, since ti and ^2 are uniform w.r.t Fcll, we obtain 
h e Fcll and t2 G Fcll- Hence, by Lemma [Ht] again, a.{ti V ^2) G Fcll- 

(RS3) Suppose a.{ti V =>f |^'- Since {t',t') G 7?., it suffices to prove 

that a.tiOa.t2 =^f W - Since a.(ti V ^2) is stable, a.{ti V f2) ^^'f t" =^f \t' 
for some t " . So , by Lemma 4.14[ 1), we get b — a and t" = ti V t2. Further, 
by Lemma 4.14 12), either ti V ^2 — >f ti =^f \t' or ti V i2 — >f ^2 K'- 
W.l.o.g, we consider the first alternative. Then, it immediately follows that 
0.^1^0.^2 —^CLL ti ==^F \t'- Moreover, since a.{ti Vi2) ^ Fcll, by (RS2), we 
get a.tina.t2 ^ Fcll- Hence, a.tina.t2 ==^f \t' , as desired. □ 

Notice that the situation is different if a = r. In such case, the inequation 
(DS) does not always hold even if ti and ^2 are uniform w.r.t Fcll- As a 
simple example, consider ti = a.O and t2 = b.O with a ^ h. Clearly, they 
are uniform w.r.t Fcll- Moreover, r.(a.O V &.0) ==»f |a-0, and a.0n6.0 is the 
unique process term such that T.a.QUr.b.Q =^f |a.0n6.0. Hence, it follows 
from a.O ^ Fcll and I(a.O) ^ I(a.Onfe.O) that a.O ^ a.QUb.Q. Thus, r.(a.O V 

''•0) %Rs T.a.OUT.b.Q. 



6. Axiomatic System AXcll 

Section 5 has developed the behavioral theory of CLL on the level of seman- 
tics. This section will provide an algebraic and axiomatic approach to reason 
about behavior. We will propose an axiomatic system to capture and investigate 
the operators in CLL through (in)equational laws, and establish its soundness 
and ground-completeness w.r.t ready simulation. 

6.1. AXcLL 

In order to introduce the axiomatic system AXcll, a few preliminary defi- 
nitions are given below. 

Definition 6.1 (Basic Process Term). The basic process terms are defined by 
BNF below 

t::=0| (a.t) | (< V t) | {tnt) \ |U i) 

where a G AcIt and A C Act. We denote T(Es) as the set of all basic process 
terms. 

Definition 6.2. Let < ioi^ii ■ • ■ ,tn-i > be a finite sequence of process terms 
with n > 0. We define the general external choice □ ti by recursion: 

1. Ut, = 0, 

i<0 

2. Di, = io, 

i<l 

3. □ = ( □ ti)Utk for k>l. 

i<k+l i<k 
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Moreover, given a finite sequence < to, . . . , > and S C {Iq, . . . , tn-i}, 
the general external choice OS is defined as OS = □ t',, where the sequence 

3<\S\ ^ 

< tg, . . . , ^|5|_i > is the restriction of < tg, . . . , t„-i > to S. 

In fact, up to =Rs (or, see below), the order and grouping of terms in 
□ ti may be ignored by virtue of Prop. 5.5 '2) (4) (axioms EC! and EC2 below, 

respectively) . 

Definition 6.3 (Injective in Prefixes). A process term □ ai.ti is said to be 

i<n 

injective in prefixes if a; ^ aj for any i ^ j < n. 

We now can present the axiomatic system AXcll- As usual, AXcll has 
two parts: axioms and inference rules. 

Axioms 

Unless otherwise stated, we shall assume variables in axioms below to be in 
range of T{I]cll)- As usual, t = t' means t ^ t' and t' ^ t. 



EC! 


xHy — yOx 


DIl 


xM y ^ yy X 


EC2 


{xay)az = xa{yaz) 


DI2 


x V (y V z) = (x V y) V z 


ECS 


xOx — X 


DI3 


xV X = X 


ECA 


xDO = X 


DM 


xM ^- — X 


EC5 


xUl. = _L 


DI5 


X ^ xWy 


COl 


X A y — y A X 


DSl 


xU{y V z) ^ [xUy) V {xUz) 


C02 


[x Ay) A z ^ X A{y A z) 


DS2 


xA{y\/z) {xAy)\/{xAz) 


COS 


xAx = X 


DS3 


X \\a {yyz) ^ {x \\a v)y{x \\a z) 


C04 


xA_L = _L 


DSA 


a.{x V y) ^ a.xOa.y, where x,y E T{Yib 


PRl 


a._L = _L 


PAl 


x\\Ay = y \\a X 


PR2 


T.X = X 


PA2 


xWa^^I- 


ECCl 







ECC2 



ECC3 



□ ai.Xi A □ bj.yj = _L if {ai\i <n\ ^ < '^}- 



□ ai.{xi A 2/i) □ ai.Xi A □ Ui.yi 



□ ai.Xi A □ ai.yi ^ □ ai.{xi A j/i), where □ ai.Xi is injective in prefixes. 

i<n i<n i<n i<n 
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EXPl 



□ tti.Xi \\a □ bj.yj < 

i<n j<tTi 

□ ai.{xi \\a □ bj.yj)D □ bj.( □ a^-Xj |U y^) I □ □ ai.{xi \\a Vj) 

i<n, j<ni i<"i, i<n j i<nj<m 

EXP2 

□ Ui-Xi \\a □ bj.yj ^ 

i<n j<m 

□ ai.{xi \\a □ ^i-2/j)n □ bj.{ □ Oi-Xj ||a yj) I □ □ ai-(xi \\a yj) 

i<n, j<tTi j<^^ i<n j i<nj<m 

where Xj, yj G TCEb) for each i < n and j < m. 
Inference rules 
REF 

t < t 

f <f' f' < f" 
TRANS t^t,t 

t ^ t" 

CONTEXT for each n-ary function symbol f €^cll 

tl ^ t'l, . . . ,tn ^ t'^ 

Given the axioms and rules of inference, we assume that the resulting no- 
tions of proof, length of proof and theorem are already familiar to the reader. 
Following standard usage, \- t ^ t' means that t ^ t' is a theorem of AXqll- 

6.2. Soundness 

This subsection will establish the soundness of AXcll- To this end, a 
number of properties of general external choice □ ti are needed. First, a simpler 

result is given below: 

Lemma 6.4. Let n > and {ai\i < n} C Act. 

1. □ e FcLL ifftk e FcLL for some k <n. 

i<n 

2. □ tti.ti -^CLL ti for each i < n. 

3. // □ Gi.ti -^CLL s then a = ak and s = tk for some k <n. 

Proof. Proceed by induction on n, omitted. □ 
Proposition 6.5. Let a,, bj e Act for each i <n and j <m. 
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1. If {ai\i < n} ^ {bj\j < m} then □ Ui.ti A □ bj.Sj —rs -L- 

■i<n j^'ni 

2. If {ai\i < n\ = {bj\j < m} then □ ai.{tiAsj) ^rs □ ai-tiA □ bj.Sj. 

ai—bj, i<n j<m 

i<n,j<m 

3. n ai.{ti A s,) ^Rs n tti.t, A n ai.s,. 

Proof. (1) Since {ai\i < n} ^ {bj\j < m}, w.l.o.g, we may assume that 
Ok (ji < m} for some k < n. Since ai,bj € Act for each i < n and 

j < m, by Lemma 6.4 12)(3), we have □ Oi.ii -^cll ifc, □ fli-^i t^cll, 

we have 



□ bj.Sj -p^cLL and □ bj.Sj -f^cLL- Further, by Lemma 



4.16 



□ Qi.tiA n bj.Sj ~/-^CLL- So, 



e Strip{TZcLL,McLL)- Hence, 



we have □ ai.ti A □ bj.sjF £ Mcll- Then, □ Oi.ti A □ bj.Sj =rs -L holds 
triviaUy. 

(2) If n = then m = and it is trivial to check Qrs A 0. In the following, 
we consider the case where n > 0. For each i < n, by Lemma 5.7 2) and 
Prop. 5.12[ 1), we have 

ai.{ti A Sj) Cfls cii.ti for each j < m such that = bj. 

Therefore, by Prop. [5^2) (4) (6) and |5.12| ;2), it follows that 



□ ai.(ti A Sj) ^Rs □ Oi.ti 



ai —bj , 



(6.5 



Similarly, we have 



□ bj.{ti A Sj) ^Rs D bj.Sj. 

ai—hj, j<m 
i<n,j<m 



Since {ai\i < n} — {bj\j < to}, by Lemma 5.5|2)(4), we have 



(6.5 2) 



□ a.i.{ti A Sj) ^Rs 

ai—bj , 



□ bj.{U A Sj). 

ai—bj , 



(6.5 3) 



Thus, by Lemma [5/7[4), it follows from (6.5 1), (6.5 2) and (6.5 3) that 



□ ai.{ti A Sj) \Zrs n Oi.ti a n bj.Sj. 

ai—bj, i<n 
i<n,j<m 



(3) Immediately follows from (2). 



□ 



In the following, we provide an example to illustrate that it does not always 
hold that □ Oi.ti A □ a^.Si Qrs Q ai.(ti A Si). 

i<n i<n i<n 
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Example 6.6. Consider process terras ao-to = a. 6.0, ai.ti = a.c.O, ao-So — 
a.b.O and ai.si = a. 6.0 where c ^ b. Then, □ ai.ti = a.6.0na.c.O, □ Ui.Si = 

i<2 i<2 

a.6.0na.6.0 and U aiXUAsi) = a.{b.OAh.Q)Ua.{c.QM).Q). Assume that □ a^.i^A 

i < 2 i<_2 

□ ai-Si Ci?s n Oi-f^i A Sj). Since these process terms are stable, we have 

i<2 i<2 

□ tti.ti A □ tti.Si C □ ai.(ii A Si). It follows from c.O A 6.0 -f^cLL and 

i<2 i<2 ~flS »<2 

e Strip{RcLL,McLL)- So, c.O A 6.0 G Fcll follows 



6.0 /^cLL that 
from c.O 



CLL 0. Further, by Lemma 



4.17 



we get □ a.i.{ti A s^) g Fcll- 

i<2 



Thus, it follows from □ ai.UA □ a^.s^ □ U ai.(tiAsi) that □ Gi.UA □ Qi.Si S 

i<2 i<2 ~RS *<2 i<2 i<2 

Fcll- Since □ a^.i^ ^ Fcll, □ a^.Sj ^ Fcll andl( □ a^.U) =I{D Ui.Si), the 

i<2 i<2 i<2 i<2 

last rule applied in the proof tree of Strip{VcLL, Mcll) ^ D cii.ti A □ Ui.SiF 

i<2 i<2 

is of the form 



□ aj.ti A □ a,-.s,- 



i<2 



i<2 



□ aj.ti A □ ai.SjF 



with AfcLL h □ fti-ij A □ ai.Si^Fa 



i<2 



i<2 



i<2 

Then, by Lemma 



i<2 



4.18 



t G Fcll for each t such that □ ai.ti A □ a^.s 

i<2 i<2 



But, it is easy to see that □ ai.tiA □ a^.s^ 

i<2 i<2 

a contradiction. 



>CLL t. 

cll 6.0A6.0 and 6.0A6.0 ^ Fcll, 

□ 



However, for any general external choice □ ai.ti with distinct prefixes, we 
have 



Proposition 6.7. Lei G Act /or eac/i i < n. If O ai.ti is injective in prefixes 
then \3 ai.ti A □ a^.s^ \3 ai.{ti A Si). 

i<n i<n i<n 

Proof. We consider the non-trivial case where n > 0. Since Oi £ Act for each 



i < n, by Lemma 



6.4 



3) and 



4.16 



it is easy to see that □ ai.ti A □ ai.Si 

i<n i<n 

and □ ai.{ti A Si) are stable. Thus, it suffices to prove □ Oi.ti A □ Ui.Si C 

i<n i<n i<n RS 

□ ai.{ti A Si). Put 



7^ = {( □ ai.t^ A a a,.s^, □ a,.{t^ A s,))} U Idg. 



We need to show that the pair ( □ Oi.tiA □ Oi.Si, □ ai.{tiAsi)) satisfies (RSl)- 

i<n i<n i<n 

(RS4). It is easy to check that (RSI) and (RS4) hold. We deal with (RS2) and 
(RS3) as follows. 

;2), there 



(RS2) Suppose □ aj.(ti As^) e Fcll- By Lemma 6.41) and 



4.17 



exists k < n such that tk A Sk £ Fcll- On the other hand, by Lemma 6.4 '2), 
we obtain □ ai.ti -^^cll tk and □ a^.s^ —^cll Sk- Further, it follows from 



Lemma 



4.15 



2) that □ ai.ti A □ ai.Si — '^cll tk A Sfe. Moreover, since both 

i<n z<n 
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□ Ui.ti and □ ai.Si are injective in prefixes, by Lemma 4.15 
follows that ife A s^. is the unique afe-derivative of □ a^.i^ A U a^.s 

i < n i<n 

by Lemma 



2) and [6^3), it 
herefore, 



desired. 



4.20 



□ ai.ti A □ tti.Si e FcLL comes from tk /\ Sk e Fcll, as 



(RS3) Suppose □ Ui-U A □ a^.s 



i? \t' . Since □ ai.ti A □ a.^.s^ is sta- 

i<n i<n 

F t" 1^' for some t" . Since □ Ui.ti 

i<n 

3), we get 



4.15 ;2) and 



6.4 



ble, we have □ ai.ti A □ a^.s 
and □ ai.Si are injective in prefixes, by Lemma 

□ ai.ti ~^cLL tk, □ ai.Si ~^cLL Sk, a ^ ak and t" = tk A for some k < n. 
On the other hand, by Lemma 



Moreover, since □ ai.ti A □ a^.s 
Hence, we obtain □ ai.{ti A s;) — 



6.4 '2), we get □ ai.{ti A Si) ~^cll tk A Sk- 
FcLL, by (RS2), □ a,.{t, A s,) i Fcll- 



>F tk A Sk = t" \t' and {t',t') en. □ 



The next two propositions state the properties of the interaction of general 
external choice and parallel operator, which are analogous to the expansion law 
in usual process calculus. 

Proposition 6.8. Let n > 0, m > 0, A C Act and a^, bj <E Act for each i < n 
and j < m. Then 

□ aa^ \\a □ b,.sj ((mi)n(m2))n(nr!3), 

i<n 



where fii — {ai.{ti \\a D bj.Sj)\i < n and ai ^ A}, = {^j-i D ai.ti \\a 
Sj)\j < m and bj ^ A} and fl^ — {ai.{ti \\a Sj)\ai — bj £ A.i < n and j < m}. 



Proof. Set N ^ n a,.t. 



\a □ foj.s,- and M ^ ((□r2i)n(m2))n(nf^3)- Since 

j<ni 

both N and 



Oi, bj e Act for each i < n and j < to, by Lemma 6.4 3) and 
M are stable. It is enough to prove N C M. Put 



4.16 



TZ^ {{N,M)}U Ids. 



It suffices to show that 7?. is a stable ready simulation relation. We will check 
that the pair {N,M) satisfies (RS2), (RS3) and (RS4) one by one. 

(RS2) Suppose M e Fcll- Then, by Lemma [6^1) and|4l7];3), we have 
t e Fcll for some t € ^liUft2U^3. We shall consider the case where t e fti, the 
others may be treated similarly and omitted. In such case, we may assume that 

4l7|;2)(3), 

TT7;2)(3), 



6.4 1) and 



t — ai^.{tig \\a □ bj.Sj) with iq < n and ai„ ^ A. So, by Lemma 

j<m 

either tj^ € Fcll or □ bj.Sj e Fcll- Then, by Lemma 

j<ni 

it is easy to see that each of them implies □ Oi.ti 
desired. 



□ bj.s-i £ Fcll, as 
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(RS3) Suppose N =^f W- So, N i Fcll, further, by (RS2), we get 
M i. Fcll- Since N is stable, N t" =^f W for some t" . We con- 

sider three cases based on the form of the last rule applied in the proof tree of 
Strip(rcLL,McLL) ^ □ a,.U \\a .□ b^-Sj t" . 



Case 1 



□ ai.ti 



„ - — -— with McLih □ foj.Sj 7^ and a ^ A. 



So, □ tti.ti — > r G McLL and t" = r ||^ □ bj.sj. By Lemma 



6.4 



3), we 



have a — a^^ and r = ti^ for some iq < n. Since ^ a ^ A, aig.{tig \\a 
□ bj.Sj) € fli. So, by Lemma 6.4 '2), Dr^i —^cll tio \\a D bj.Sj. Further, 
by Lemma 6.4 3), it follows from {a^, bj\i < n and j < m} C Act that 

OQ2 -f^CLL and nrJs -f^cLL ■ 

1), we get Af ^cLL \\a □ Hence, M =^f \t' 

j<m 



Then, by Lemma 
and {t',t') e n. 



4.15 



□ 6; 



Case 2 



n , „ n . '^^ith McLL \= □ a,.t, 7^ and a ^ A. 

□ tti.tillA.D ftj-Sj >■ U Qi. tiller i<n 



Similar to Case 1. 
Case 3 



J<T1 



with a e A. 



So, □ Ui-U — > r e McLL, □ fcj-Sj — > s e AfcLL and t" = r ||^ s. By 

2 < n J < m 

Lemma 



6.4 13), we have a — 



= tig for some iq < n and a — bj^, s = sjg 
, = a e A, ai(,.(tjo II A g-in) € r^a. So, by 
2), nr^a -^cLL tig \\a Sjg. Moreover, by Lemma 6.4 '3), it follows 
from {ai,bj\i < n and j < m} C Act that Ofli ~f~^cLL and □512 ~f-^CLL- 
Then, by Lemma 4.15^1), we get M -^cll Uo \\a Sjg. Hence, M \t' and 



for som e jp < m. Since atg 

I I a . „ 

Lemma 



6.4 



it',t') e n. 

(RS4) We just prove I{M) C I{N), the proof of I(Af) D I(iV) is similar 
and om itted. Assume that a e I{M). So, M -^cll t' for some t' . By 
Lemma 4.15[1), s -^cll t' for some s e U fli. We shall consider the 

l<i<3 



case where s £ fli, the others are similar and omitted. In such case, we may 
assume s = aig.(ti ||a □ bj.sA with ip < n and a,; ^ ^4. Then, we get 

io ||a □ bj.Sj. Since {6j|j < m} C Act, by Lemma 6.4 '3), 

j<m 



a = air, and f = t 



McLL 1= n bj.Sj -f^. Further, it follows from aig ^ A that 

j<m 



[m cii.ti ^ 



□ Ci.tj lU □ bj.Sj IIa □ bj.Sj 



G Strip{RcLL,McLL). (6.8 LI) 
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On the other hand, by Lemma 



it foUows from (6 



6.4 



2), we have □ a^.ti 

i<n 



>CLL ti„- Therefore, 



1.1) that □ ai.ti 

i<n 



j<m 



tig \\a □ bj.Sj e McLL- 

j<m 



So, a = ai„ e 1[N), as desired 



□ 



Compare to usual expansion law in process calculus, e.g.. Prop. 3.3.5 in |22j . 
we expect that the inequation below holds, where fi^ (1 < i < 3) is same as 
ones in Prop. |6?i 



((□r!i)n(m2))n(m3 



(EXP) 



Unfortunately, it isn't valid. For instance, consider the process terms flQ.to = 
a._L, ai.ti — c.O and &o-So = ^-0 with a ^ h, c ^ a and c ^ h. Let A — {a, &}. 
Clearly, the set $1^(1 < i < 3) corresponding to ones in the above proposition 
are: VLi = {c.(0 b.O)} and ^22 = ^^3 = 0- Then, 

((mi)n(m2))n(m3) = (c.(0 \\{aM fo.o)no)no. 



By Lemma [4T7| (a.^Dc.O) \\{a,b} b.Q G Fcll and (c.(0 6.0)nO)nO i 

FcLL- Then, it s easy to see that (c.(0 6.0)nO)nO %rs (a._Lnc.O) 

6.0. 

However, the inequation (EXP) holds for the process terms satisfying a mod- 
erate condition. Formally, we have the result below. 

Proposition 6.9. Let n, to > 0, A C Act, and let ti, sj G T{I]cll) and a;, bj £ 
Act for each i < n and j < to. Assume that {{ti\ai € A and a-i ^ bj for each j < 
m} U {sj\bj G A and bj ^ Oi for each i < n}) n Fcll = 0, then 

((□r!i)n(m2))n(nr!3) ^Rs □ aa^ lU □ 

where Vli (1 < i < 3) is same as ones in Prop. \ 6.S[ 

□ bj.Sj and N ^ {{Dni)a{Dn2))a{Dn3). Similar 

L<^rL j 

to Prop. 



Proof Set M = □ a,.ti 

we shall prove N □ M. Put 



6.8 



7^ = {(7V,A.f)}U/ds• 
It suffices to show that 7?. is a stable ready simulation relation. We will check 



that the pair {N,M) satisfies (RS2), the remainder is similar to Prop. 6.8 



(RS2) Suppose M G Fcll- It follows from Lemma [4T7| and [6^ 1 ) that 

either ti^ G Fcll for some iq < n or Sj^ G Fcll for some jo < rn. 

W.l.o.g, we consider the first alternative. Then, by the assumption, we get 
either Oig ^ A or = bj^ for some jo < to. Consequently, either aig.(ti„ \\a 
□ bj.Sj) G fli or aig.{tig \\a Sj^) G ^3. So, by Lemma |4.17| and 

Fcll follows, as desired. 



6.41), N G 

□ 
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By Lemma 4.17 it is easy to see that the operators a.(), V, □ and \\a 
preserve consistency. Thus, an immediate consequence of Lemma |4. 17 



IS 



Lemma 6.10. r(SB) n Fcll 



Proof. Induction on the structure of basic process terms (see, Def. 6.1). 
Therefore, as a corollary of Prop. |5.16 and |6.9[ we have 



□ 



Proposition 6.11. Let ri,r2 G TCSb) and ti,Sj G T(I]b) for each i < n and 
j < m. Then 

1. a.{ri V Qrs a.riOa.r2 for each a G Act. 

2. ((□17i)n(ni72))n(nf^3) Cfls □ ai.t, \\a □ bj.Sj, where f7i(l < i < S) is 



same as ones in Prop. \6. 



Proof. Immediately follows from Lemma 6.10 and Prop. 5.16 and 6.9 



□ 



We now have all of the properties we require to prove the soundness of the 
axiomatic system AXcll- 

Definition 6.12. For any t, s G TCScll), the inequation t ^ s is said to be 
valid in Mcll, in symbols Mcll \= t ^ s, if and only if t s- 

Theorem 6.13 (Soundness). If \- t ^ s then Mcll \= t ^ s for any t,s £ 

n^CLL). 

Proof. As usual, it is enough to show that 

1. all ground instances of axioms are valid in Mcll, and 

2. all inference rules preserve validity. 



Item (1) is implied by Prop. 5.2 5.3 5.5 5.8 5.9 5.13 6.5 6.7 6.8 and 6.11 



Item (2) is implied by Prop. 5.12 and the fact that ^rs is reflexive and transitive. 

□ 



6.3. Normal Form and Ground- Completeness 

This subsection will establish the ground-completeness of AXc ll ■ We begin 
by giving two useful notations. 

Notation 

1. Prefix[ □ ai.ti) = {ai\i < n}. 

2. Let < to, ti, . . . , tn-i > be a finite sequence of process terms with n > 0. 
We define the general disjunction \J t^ by recursion: 

(a) y ti = to, 

(b) V k^{\/ti)\/tk for fc > 1. 

i<k+l i<k 
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Similar to general external choice, up to =, the order and grouping of terms 
in V ti may be ignored by virtue of axioms DIl and DI2. 

To prove the ground-completeness of AXcll, we use a general technique 
involving normal forms. The idea is to isolate a particular subclass of terms, 
called normal forms, such that the proof of the completeness is straightforward 
for it. The completeness for arbitrary terms will follow if we can show that each 
term can be reduced to normal form using the equations in AXqll- We define 
normal form as follows. 

Definition 6.14 (Normal Form). The set NFb is the least subset of T{T.cll) 
such that \/ ti E NFb if ?i > and for each i < n, ti has the format □ Uij.tij 

with rrii > such that 

(N) t,j e NFb for each j <mi, 

(D) □ aij.tij is injective in prefixes, and 

j<mi 

(N-r) aij e Act for each j < mi. 
We put 

NF = {1.}\JNFb. 
Each process term in NF is said to be in normal form. 

Notice that NFb Q and G NFb by taking n = I and toq = 

in Y □ tij. In the following, we will show that each process term can be 

transformed using the equations into a normal form, which is a crucial step 
in establishing the ground-completeness of AXcll- To this end, the next five 
lemmas are firstly proved. 

Lemma 6.15. h y) V (a; z) a; (y V for each e {□, A, \\a}- 

Proof, h y < y V 2 and h z y V z (by DIl, DI5 and TRANS) 

cc y < X (y V z) and h a; z < a; (y V z) (by CONTEXT and REF) 
(a;0y)V(a;0z) < x0(yVz) (by DI3, CONTEXT and TRANS) □ 

Lemma 6.16. If t,s E NFb then \- t A s ~ r for some r e NF. 

Proof. We prove it by induction on the number \t\ + \s\. Since t, s £ NFb, we 
may assume that t = \l ti and s = V s;/. By DIl, DI2, COl, DS2 and 

i<n i' <Cn' 

Lemma |6.15[ we get 

\-tAs^ y {tiAse). ( |6.16[ 1) 

i<n.i' <n' 

Let i < n and i' < n' . We will show that h A Si' = rai for some rai e NF. 
Clearly, we may assume that ti= □ aij.tij and Sii = □ biiji.Si'ji satisfying 

j<rrti j'<m'/ 



(N), (D) and (N-r) in Def. 6.14 We consider two cases below. 



Case 1 Prefix{ti) ^ Prefix{si 
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By ECCl, we have h A Si' = ±. 



Case 2 Prefix{ti) — Prefix{si'). 

Thus, by the item (D) in Def. 6.14 we have = m[. If mj = then, 
by the definition of general external choice, we get ti = Si' = 0. Moreover, 
\- ti A Si' =0 follows from C03. In the following, we consider the nontrivial 
case where > 0. By ECl, EC2, ECC2 and ECC3, it follows that 

h A Sj' = □ a.ij.{tij A Si'j'). 

j,j'<mi, 

For each pair < rrii with aij — bi'j', since tij,Si'j' € NFb and \t\ + |s| > 
\tij \ + |si'j'|, by IH, we have h tij A Siij' — tiji^ji for some Uji/jr e NF. Set 

S CH tt^j .tiji' j' . 

j,j'<mi, 

Consequently, by CONTEXT and TRANS, we have 

\- U A Si' — S. 

Clearly, iitiji'ji G NF^ for each pair < rrii with aij — bi>ji, then S € NFg. 
Otherwise, we have tij^iij'^ = _L for some joi Jo < ''^ii then it follows from PRl 
that 

Further, by ECb, CONTEXT and TRANS, we get h 5 = _L. 

In summary, it follows from the discussion above that, for each i < n and 
i' < n', 

either h A Si' — for some rn' E NFg or h A s.^/ — _L. 



Then, by DIl, DM and (6.16 1), we get either h t A s = r for some r e NFb 
or h t A s = _L. □ 

In the above proof, we do not explicitly show the proof for the induction 
basis where t = s = 0, as it is an instance of the proof of the induction step. 

Lemma 6.17. h a.xOa.y ^ a.{x V y). 

Proof, h a; < a; V y and h y < a; V y (by DIl , DI5 and TRANS ) 

=^h a.x < a.{x V y) and h a.y a.{x V y) (by CONTEXT) 

=>h a.xOa.y ^ a.{x V y) (by CONTEXT, iJCS and TRANS) □ 

Lemma 6.18. //< = □ a,.ti e NFb and s = D bj.Sj e NFb, then h tUs = 

i<n j<rn 

n Ci-Ti for some □ Q.ri G NFb- 
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Proof. If n = or TO = then it immediately follows from ECl, EC A and 
Def. 6.2 In the following, we consider the non-trivial case where n > and 
m > 0. We distinguish two cases below. 

Case 1 Prefix(t) n Prefix{s) = 0. 
Set 

Ofc.ifc k <n, 



Pk 



6fe_„.Sfe_„ n < k < m + n. 



6.14 



Then, it is trivial to check that □ pk satisfies (N), (D) and (N-r) in Def. 
that is, □ Pk e NFb. Moreover, by EC2 and TRANS, it immediatelyToT 

A;<m+n 

lows that h tC\s = □ pfc. 

/c<m+n 

Case 2 Prefix{t) n Prefix{s) ^ 0. 



Let io < n and jo < m with — bj^, since NFb ^ TC^b), by Lemma 6.17 
and DS4:, we get h aiQ.ii(,n6jo.Sj(, = aig.{tig V Sj^). Further, by Def. 6.14 DIl 
DI2, CONTEXT and TRANS, it follows from t,„,Sj, e NFb that 

h aio.iioDfejo.Sjo = aj„.p for some p G iVFe. 

Thus, for each i < n and j < m with = 6j, we can fix a process term 
Pij € NFb such that 

h ai.tiUhj.Sj ai.pij. 

Put 

1. S"! = □ Oi.ti, 

ai(^Prefix{s), 
i<n 

2. 52 = □ 6,.sj, 

bj^Prefix{t), 
j<m 

3. 53 = □ Ci.pij. 

ai£Prefix{t)nPrefix{s) , 

Then, by £^(71, £;C2, TRANS and CONTEXT, we obtain h tOs = (S'inS'2)n53. 
Clearly, both 5*1 and 5*2 are in NFb- Moreover, since t and s are injective in 
prefixes, so is ^3. Hence, 5*3 is also in NFb- Further, since Prefix{Si) D 
Prefix{Sj) = $ ioi 1 < i ^ j < S, similar to Case 1, we have h (5'inS'2)n5'3 = 
□ Ci-Ti for some □ c^.r^ e NFb- D 

Lemma 6.19. Ift,s£ NFb then \- t \\a s ^ r for some r e NFb- 

Proof. We prove it by induction on the number \t\ + |s|. Since <, s G NFb, we 
may assume that t = \J ti and s = \l Si'- By axioms DIl, DI2, PAl, DS3 

i<n i' <Cn' 

and Lemma 6.15 we get 



ht\\AS^ y (UWas,,). ([6l9 
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n , 



^ tiWASi' ^ ru' for some r,^, € NFb- 



Let i < n and i' < n' . We may assume that U 

□ bi'j'.Si'j' satisfying (N), (D) and (N-r) inDef. 
we have 



6.14 



□ aij.tij and Si' = 

j<mi 

By EX PI and EXP2, 



J<ini, - - j'<m'., 



We consider two cases. 



Case 1 mi = or m', = 0. 



(6.19 2) 



W.Lo.g, assume that = 0. Then, by ( |(U9| 2), ECl, ECA, CONTEXT 
and TRANS, we get 



I- U \\a = □ &i'j'.(0 \\a s,,j'). 

j'<m'.,, 



(6.19 3) 



If {bi'j' ^ A\j' < m[, } = then h \\a Si' — Q. Next, we consider the case where 
{hi'ji ^ A\i' < m[,} 7^ 0. For each j' < m-, with bi'j' ^ A, we have Si'j' G NFb, 
moreover, \t\ + \s\ > |0| + \si'j'\. Then, by IH, we get h ||^ Si'j' — pj' for some 
Pf G NFb. Therefore, by CONTEXT, TRANS and ( |6.19| 3), it is easy to see 
that \- U \\a Si' — rn' for some rn' G NFb- 



Case 2 TTii > and m[, > 0. 

In such case, for each j < rrii and j' < m'^,, we have \t\ + \s\ > \tij\ + \si'\, 
\t\ + \s\ > \ti\ + \si'j' \ and \t\ + \s\ > |iij| + |sj'j'|. Moreover, U^, Si' ,ti, Si'j' e NFb- 



Then, by IH, there exist Uji' ^tn'ji ^tiji'j' 



G NFb such that h ti 



\a Si 



l~ ti \\a Si'j' — tii' ji and h tij \\a Si'j' 

1. — CH CLij.tiji', 

aij ^A, 
j<mi 

2. 82= n bi'j'.tii'j', 

h,,,'tA., 
j'<m'., 

3. 83= □ 



^iji' j' ■ Set 



j' Km'., ,j<m 



Clearly, 81,82,83 G iVFe and h t, ||a s»' = {81082)083. Further, by Lemma|6.18 
we get \- ti \\a Si' = Tii' for some rn' G NFb, as desired. 

In summary, by the discussion above, we conclude that, for each i < n and 
i' < n' , h ti \\a Si' — rn' for some rn' G NFb. Then, by Def. 6.14 and (6.19 1), 
it immediately fohows that \- t \\a s = r for some r G NFb, as desired. □ 
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Now, we can prove that each process term is normaUzablc. That is, we have 
the result below. 

Theorem 6.20 (Normal Form Theorem). For each t G T{Y.cll), \- t = s for 
some s G NF. 

Proof. We prove it by induction on the structure of t. 

• t = or i = _L. 

Trivially. 

• t = a.ti. 

By IH and CONTEXT, we get h t = a.t[ for some t[ G NF. If t[ ^ _L and 
a G Act, then a.t[ G NFb. If t[ = _L, by Pi?l, PR2 and TRANS, we obtain 
h t = _L. If a = r, by PR2 and TRANS, we have h i = t^. 

• t = ti(Z)t2 with G {V, □, A, Wa). 

For i = 1, 2, by IH, we have h <i = t[ for some t'^ G NF. We distinguish four 
cases based on ©. 



Case 1 = V. 

If t'^ ^ _L and 1. (i.e., t\,t'2 G NFg), then it immediately follows from 
DIl, DI2, CONTEXT and TRANS that ht = s for some s G NFb- Otherwise, 
w.l.o.g, assume that t[ = _L. Then, by DIl, DIA and TRANS, we get h < = t'2. 



Case 2 = □. 

If either t[ = _L or tj, = -L, then it follows from ECl and EC5 that \- t = ±. 
In the following, we consider the case where t[ ^ _L and t'2 ^ -L. In such 
case, we get t[,t2 G NFb. So, we may assume that t[ = \/ □ Uij.Sij and 

^2 = V I— ' bi'j'.ri'ji with □ aij.Sij, □ hi'ji.riiji G iV-Fs for each i < n 

i'<n'j'<™-'ii j<mi j'<m'., 



and i' < n'. Thus, by ZJ/l, i:>/2, CONTEXT, TRANS, DSl and Lemma |6. 15 
we obtain 

\- tiDt2 = V ( □ Oij.SijO □ bi^j/.n-j,). 

j<'mi j'<m'., 

Further, by Lemma [6T8] and Def. |6.14"1 it immediately follows that h tiOt2 — 
for some ^3 G NFb. 



Case 3 = A. 

If G NFb for i = 1,2 then, by Lemma 6.16 we have h t = for some 
^3 G NF, otherwise, by COl and C04, we get h i = _L. 



Case 4 =||a- 

If either t[ = _L or = _L then, by PAl and P A2, we get h t = _L. 
Otherwise, we have t'i,t2 G NFb, so, by Lemma 6.19 we obtain h i = s for 
some s G NFb. D 

We now turn our attention to the ground-completeness of AXcll- First, we 
state a trivial result about general disjunction. 
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Lemma 6.21. Let n > and ti he stable for each i < n. 

1. // V ti ^ FcLL then V ti \ti for each i < n. 

i<n i<n 

2. // Y ti ==^cLL \i' then t' = tig for some < n. 

Proof. Proceed by induction on n, omitted. □ 

An important step in proving the ground-completeness is: 
Lemma 6.22. //ti,t2 e NF and ti C ^2, then h ti < ^2 

Proof. We prove it by induction on the degree of ti. Since □ t2, both ti 

~RS 

and t2 are stable. Further, since ti, t2 G NF, we get, for i — 1,2 



ti = or ti = J- or ti = □ Oij.tij G iVi^s with > 0. 

j<ni 

Therefore, the argument splits into three cases below. 
Case 1 ti = ±. 

Then, by DIl, DM, DIb and TRANS, we have h ti < ^2- 



(6.22 1) 



Case 2 EE 0. 

By Lemma |4T7];5) and |4.14[ ;3), ti ^ Fcll and I(<i) = 0. Fu rther, since 



^1 C ia, we get ^2 i Fcll and = T{t2). Thus, by (6.22 

t2 = 0. Then, h ii < ^2 follows from REF 



1), we have 



Case 3 ii = □ ai.t\i with n > 0. 

i<n 

Since t\ e NFb C ^(Eb), by Lemma [6.10[ we have t\ ^ Fcll- Hence, by 

tx C t2, we get ^2 ^ Fcll and X(t2) = = < n} 7^ 0. Further, 



it follows from ( 6.22| 1) and the condition (D) in Def. 6.14 that there exist 

^21 G NFb and G Aci(i < n) such that 

^2 = □ 0^.^22 G NFb and {fliji < n} = {flil* < 

By CONTEXT, it is easy to know that, in order to complete the proof, it is 
enough to show that 

Vi < nBa < n(h Oi.tu ^ a'i,.t2i>). 



Let io < n. We have ai^ = a'-, for some Iq < n. Since tiioji2i^ G NFb, by 
Def. 



6.14 



there exist m,m' > 0, Sj(j < m) and s',(j' < m') such that 



1- hio = V Sj and ^ai^ = V s'^, 

j<ra j' <m' 

2. and s^-, are stable for each j < m and j' < m', 

3. Sj, Sj-, G NFb for each j < m and j' < m'. 
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In the following, we want to show that h Sj ^ ^21^ for each j < m. Let jo < m. 
Since NFb Q T(Eb), by Lemma 6.10 and 6.21| ^1), it immediately follows that 

tuo =>F \sjg. Thus, ti !-_F ilio 

that 

>F 1^2 •*jo ^ ^2 for some tj- 



F |sjo- Then, it follows from ti C t2 



^2 



(6.22 2) 



Further, since t2 is injective in prefixes and ^2 is stable, we get ^2 ^2i; 
|i'2. Then, by Lemma [6^ 2), we obtain 

^2 = for some Jq < m' . 



(6.22 3) 



Since \ti\ > \sj„\, by (6.22 2), (6.22 3) and IH, we get h Sj„ < s^, . Further, by 
i:)J2, DI5 and TRANS, weTiave h sj^ < t2zj,, as desired. 
So far, we have obtained 



h Sj ^ <2i;, for each j < ni. 
Then, by DIl, DI2, DI3, CONTEXT and TRANS, we get h \J Sj t2^' , that 



j<7n 



is, \- tu„ s$ t2i^. So, by CONTEXT, it follows that h ai^.tuo ^ 

We are now ready to prove the following, the main result of this section. 



□ 



Theorem 6.23 (Ground-Completeness). For any ii,t2 G T{Y^cll), Mcll \= 
ti ^ t2 implies h ii ^ i2- 



Proof. Assume that Mcll ^ h ^ t2- Thus, ti C^^g t2. By Theorem 6.20 



\- ti ~ and 1-^2=^2 for some ^2 ^ NF. It suffices to prove that \- t\ ^ t^. 
By Theorem 6.13 we have ti =rs tl and t2 =rs t^. So, tl ^rs ^2- 

If t* = ± then it follows from DIl, DI4, DI5 and TRANS that h t* sC i*. 
Next, we consider the case ^ ±. Then, e A^F^. We may assume = \/ tu 

with n > and for each i < n, tu = □ Oij.rij e A^-Fs with nii > 0. In order 

j<mi 

to complete the proof, it is enough to show that 



h tu ^ to for each i < n. 



and 



6.21 



1), we have tj =>f 
F 1^2 and iiin □ t'2 for some 



Let zo < n. Since A^Fs C T(Sb), by Lemma 6.10 
\tiig. Then, it follows from t* C/jg t2 that 

t'2. So, i2 ^ FcLL, that is, ^ -L- Thus, t^ G A^-Fs and we may assume that 

tj = V ^2i with /c > and for each i < k, t2i = □ bij.Sij G A^-Fs for some 
i<fc i<™^ 
> 0. Thus, t2i is stable for each i < k. Then, by Lemma 6.21 



2), it follows 



from tj =^F K2 ff^at t2 = *2ij| for some ig < /c. Further, by Lemma 6.22 

l~ tiig ^ ^21' follows from tug C ^2 = ^2i' • Finally, by DIl, DI2, DIb anc 

^ ~ ^g ^ 

TRANS, we obtain h ti^j, ^t2, as desired. □ 
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7. Conclusions and Further Work 

Inspired by Liittgen and Vogler's work in [20 , this paper considers a process 
calculus with logical operators. Two different views of the language CLL are 
explored in detail: 

— a behavioral view, ready simulation, 

— a proof-theoretic view, the axiomatic system AXqll- 

The soundness and completeness of AXcll reveal that the above two views 
are equivalent, that is, 

t Cfl,5 s iff h i ^ s for any i, s € T{Yicll)- 

CLL is designed as a process calculus for Logic LTSs, which rephrases 
Liittgen and Vogler's setting in a process-algebraic style. The constructors pre- 
fix, conjunction, disjunction, external choice and parallel over Logic LTSs are 
captured by corresponding operators in CLL. Moreover, a number of properties 
concerning these constructors are re-established in behavioral theory of CLL by 
very different method. Similar to usual process algebras, this paper develops 
behavioral theory based on the SOS rules which specify the behavior of process 
terms, while Liittgen and Vogler establish these properties depending on the 
constructions of Logic LTSs, and do not refer to any syntactical element. Com- 
pared with their work, the main contribution of this paper is to present a sound 
and ground-complete axiomatic system of ready simulation in the presence of 
logic operators. 

It is well known that, in addition to behavior and proof-theoretic views, the 
language of process algebra may be interpreted in denotational view (see, e.g. 
|17j). The denotational method aims at defining a denotational function which 
associates semantic objects to process terms. Such function is often given re- 
cursively by induction on the structure of process terms. It is easy to see that 
constructors explored by Liittgen and Vogler in [20j is useful when considering 
denotational semantics of CLL. In fact, we can show the result below 

Observation {G{t) 0* G(s)) i {t 0* s) =_rs G{t s) for t,s e T{J:cll) and 

e {A,v,n,|U}. 

Here, G{t) denotes the sub-LTS of LTS{CLL) generated by the process term 
t, 0* is the constructor over Logic LTSs corresponding to 0, and (G(t)0*G(s)) | 
{t&* s) is the sub-LTS of G{t)Q* G{s) generated by the state tQ* ^ This result 
suggests to us that, based on the constructors in [20], it seems not difficult to 
provide a denotational semantics for CLL, which is fully abstract with respect 
to operational semantics presented in this paper. We leave it as further work. 

This paper adopts the predicate F to describe unimplementable processes. 
Follows (20j , this predicate is involved in the notion of ready simulation. In this 



■^Since t and s arc states in G(t) and G(s) respectively, according to the construction in 
[20l . G{t) 0* G(s) contains the state labelled by t 0* s. 
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sense, the value of F is regarded as an observable signal of processes. The process 
algebra with observations of prepositional formulae have been considered by 
Baeten and Bergstra in [2j. The motivation behind their work lies in providing 
a framework to deal with conditional process expression (e.g., x<i4't>y) based on 
the view that the visible part of the state of a process is a proposition. Clearly, 
this is another method to incorporate logical components with process algebras. 
An interesting research is to compare it with the framework adopted in |20j and 
this paper, in which logical operators over processes are introduced directly. 

This paper focuses on exploring logical constructors of Logic LTSs in process 
algebraic style, some useful operators occurring in usual process algebras, such 
as hiding, recursion et.al, are not involved in CLL. Extending CLL by incorpo- 
rating these operators is worth further investigation. 
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